that's what I meant.

nlapiEscapeXML(htmlstring)

. Though it is unclear to me exactly what error you have and at what point.