fix: use xml_escape() in Stream.pm instead of manual regex escaping

fix: use xml_escape() in Stream.pm instead of manual regex escaping #410