67c67
<       return '<string>'. check_plain($xmlrpc_value->data) .'</string>';
---
>       return '<string>'. drupal_specialchars($xmlrpc_value->data) .'</string>';
80c80
<         $return .= "  <member><name>". check_plain($name) ."</name><value>";
---
>         $return .= "  <member><name>". drupal_specialchars($name) ."</name><value>";