Preventing XSS attacks in Jersey with XML Content-Type

I am having Jersey REST service with Content-Type as JSON. For this I have used AntiSamy to filter XSS attacks.

Now I need to support XML Content-Type, AntiSamy considers XML as a threat and all my requests are thrown as attack.

How to support XML as a Content-Type and avoid XSS attacks (filtering)? Thanks