XML is not escaped for tag values during deserialization

[nrempel]

<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
    <response>
        <result code="1000">
            <msg>Command completed successfully</msg>
        </result>
        <resData>
            <domain:infData xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
                <domain:name>example.com</domain:name>
                <domain:roid>123</domain:roid>
                <domain:status s="ok"/>
                <domain:ns>
                    <domain:hostObj>NS1.EXAMPLE.COM</domain:hostObj>
                    <domain:hostObj>NS2.EXAMPLE.COM</domain:hostObj>
                </domain:ns>
                <domain:clID>123</domain:clID>
                <domain:crID>user</domain:crID>
                <domain:crDate>2022-02-09T22:07:34Z</domain:crDate>
                <domain:upID>insdom1</domain:upID>
                <domain:upDate>2022-02-09T22:07:34Z</domain:upDate>
                <domain:exDate>2023-02-09T22:07:34Z</domain:exDate>
                <domain:authInfo>
                    <domain:pw>47uE&amp;@J!Ra6g</domain:pw>
                </domain:authInfo>
            </domain:infData>
        </resData>
    </response>
</epp>

Note 47uE&@J!Ra6g should be 47uE&@J!Ra6g

[djc]

Are we talking the deserialize side only, or do we have similar issues on the serialize side?

[nrempel]

Ah yes, this just during deserialization