<p>Usernames are changed directly through the web site, and don't go via the API. This means they can contain non-XML safe characters.</p>

<p>This isn't a problem using any XML API or dump, but could cause problems with e.g. history dumps.</p>

<p>They should be stripped of non-XML characters, c.f. <a href="https://github.com/openstreetmap/openstreetmap-website/blob/d27cc80b438b0943ac532b727b48b6ca6601f990/app/controllers/amf_controller.rb#L883">https://github.com/openstreetmap/openstreetmap-website/blob/d27cc80b438b0943ac532b727b48b6ca6601f990/app/controllers/amf_controller.rb#L883</a></p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br>Reply to this email directly or <a href="https://github.com/openstreetmap/openstreetmap-website/issues/759">view it on GitHub</a>.<img alt="" height="1" src="https://github.com/notifications/beacon/1419053__eyJzY29wZSI6Ik5ld3NpZXM6QmVhY29uIiwiZXhwaXJlcyI6MTcxODQ2MzEzMCwiZGF0YSI6eyJpZCI6MzQ2OTM4MjJ9fQ==--451d286fbc510cefd7392b1c39601a670bb0c39d.gif" width="1" /></p>