Answer
Create a Transformer file and attach it to the relevant Routing Address — the transformer runs on the outbound message and can strip or properly escape special characters like &, <, and > before the file is generated, rather than needing to sanitize the source data itself at the point of entry.