public string SanitizeXmlString(string xml) { if (xml == null) throw new ArgumentNullException(nameof(xml)); var buffer = new StringBuilder(xml.Length); foreach (var c in xml) buffer.Append(IsLegalXmlChar(c) ? c : '?'); return buffer.ToString(); }