Database password is not escaped in the generated hibernate.cfg.xml in debian installer

If you use a to-be-escaped XML character (such as &) as a password for the database, the wiki will fail to start.

The XML special characters should somehow be escaped.

The list can be found here: http://en.wikipedia.org/wiki/XML#Escaping