in src/Utils.php [210:248]
public static function escapeXml(string $s): string
{
$result = '';
$length = strlen($s);
for ($i = 0; $i < $length; $i++) {
$d = $s[$i];
switch ($d) {
case '"';
$result .= '"';
break;
case '&';
$result .= '&';
break;
case '<';
$result .= '<';
break;
case '>';
$result .= '>';
break;
case "\t";
$result .= '	';
break;
case "\n";
$result .= ' ';
break;
case "\r";
$result .= ' ';
break;
default:
$n = ord($d);
if ($n < 0x20) {
$result .= sprintf('&#%02d;', $n);
} else {
$result .= $d;
}
}
}
return $result;
}