I don't know xml. I do know html and js, though. Like one that blocks users from an element's inner html.
Object.defineProperty(Element.prototype,'innerHTML',{ get:function(){console.error('Object depricated.')}