protect & and < enities on html2xml