Filter input to avoid XPath injection

PKSA-2f54-4t85-fzzg

Affected package: robrichards/xmlseclibs

Affected version: >=1.0.0,<2.0.0|>=2.0.0,<3.0.0|>=3.0.0,<3.0.2

Reported by:
FriendsOfPHP/security-advisories