A client is sending us an XML file generated by Oracle Reports 6 that is not always well formed. Rogue & and < characters etc. We don't have Oracle Reports ourselves but I've downloaded version 10.1.2.0.2 and this automatically causes these characters to be converted to their appropriate entities. Does Oracle Reports 6 do the same thing or is an intermediate step required? Does Oracle Reports 6 need to be told explicitly that it must escape these characters?