使用System.Security.SecurityElement.Escape 例如:string XmlFriendly = System.Security.SecurityElement.Escape(坏的'string");

use System.Security.SecurityElement.Escape eg : string XmlFriendly = System.Security.SecurityElement.Escape("the bad ' string");