diff --git a/src/etc/inc/xmlparse.inc b/src/etc/inc/xmlparse.inc
index 8a0b83a666..0edfcea93a 100644
--- a/src/etc/inc/xmlparse.inc
+++ b/src/etc/inc/xmlparse.inc
@@ -220,7 +220,7 @@ function is_cdata_entity($ent) {
 		'descr', 'detail', 'email', 'encryption_password', 'ldap_attr',
 		'ldap_authcn', 'ldap_basedn', 'ldap_bind',
 		'ldap_extended_query', 'login_banner', 'organization', 'state',
-		'text', 'username'
+		'text', 'username', 'password', 'auth_user', 'auth_pass'
 	);
 
 	/* Check if the entity name starts with any of the strings above */