                <account_code>#{data.accountCode}</account_code>
                <username>#{data.username}</username>
                <email>#{data.email}</email>
-               <first_name>#{data.firstName}</first_name>
-               <last_name>#{data.lastName}</last_name>
+               <first_name>#{escape data.firstName}</first_name>
+               <last_name>#{escape data.lastName}</last_name>
 
                <billing_info>
                  <number>#{data.cardNumber}</number>

      plan =
        code       : res.plan.plan_code[0]
        title      : res.plan.name[0]
        desc       : if typeof res.plan.description[0] is "string" then unescapeHTML res.plan.description[0] else ""
        feeMonthly : parseInt res.plan.unit_amount_in_cents[0]['USD'][0]['_']
        feeInitial : parseInt res.plan.setup_fee_in_cents[0]['USD'][0]['_']
      callback no, plan

xml2js   = require 'xml2js'
https    = require 'https'

S        = require 'string'
punycode = require 'punycode'

escape = (text)->
  if typeof text is 'string'
    punycode.encode S(text).escapeHTML().s
  else
    ''

unescape = (text)->
  if typeof text is 'string'
    S(punycode.decode text).unescapeHTML().s
  else
    ''

createId = require 'hat'
getUniqueId = -> createId 64
