When preparing login request Zabbix directly copies user name and password into xml template without escaping. This means user has to manually escape xml characters <>",& when entering username/password, which is not good.