In XML, you don't need to escape >, IIRC. So, it would seem some programmer is either lazy here, or trying to save bytes. You MUST escape <, as otherwise it looks like the start of a tag. Note that the content of the tag you see that in is serialized HTML, too, so at that point, there's HTML in the XML. (and not very good HTML…)