fix(xss): Do not format string with the self.w method

This method use the xml_escape method from logilab.mtconverter module to ensure every string from the arguments are correctly parsed.