{code:xml} formats some XML entities incorrectly

The XML snippet on

http://confluence.atlassian.com/display/TEST/Testing+XML

contains an "& #10 ;" (spaces added) XML character entity right after "($TYPE$)$EXPR$". Confluence doesn't escape the entity which results in the browser rendering the entity as a linefeed and not show the actual XML content. AFAIK the correct behavior would be to escape the entity so it's shown to the user as it appears in the XML source.