fix: enhance domain handling in sitemap generation and add XML escaping utility

utils/sitemap.js

@@ -6,7 +6,7 @@ export const DOMAIN_CONFIG = {
 };
 
 export function isMainDomain(domain) {
-    return domain === DOMAIN_CONFIG.MAIN_DOMAIN;
+    return domain === DOMAIN_CONFIG.MAIN_DOMAIN || domain.includes('localhost') || domain.includes('127.0.0.1');
 }
 
 export function encodeUrlParam(param) {
@@ -24,7 +24,19 @@ export function createSitemapUrl(baseUrl, path, params = {}) {
     });
 
     const queryString = searchParams.toString();
-    return queryString ? `${url}?${queryString}` : url;
+    const fullUrl = queryString ? `${url}?${queryString}` : url;
+
+    // Escape XML entities
+    return escapeXml(fullUrl);
+}
+
+export function escapeXml(str) {
+    return str
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
 }
 
 export function createSitemapEntry(url, priority = 0.8, changeFrequency = 'weekly') {