pub fn xml_safe(dest: &mut String, text: &str)