C-sharp : XSLT injection