NewDecoder returns a new decoder that reads from r.

A Decoder reads and decodes XML from an input stream.

A SafeReader escapes UTF control characters in the io.Reader it wraps, so that it can be fed to Go's xml parser.