Why: * xml output of ipset is invalid because ipset itself doesn't appear to escape invalid chars * fixes #2958
weave-