Curiously, there's no need to escape double quotes inside custom expressions!
ReplaceString(
[//WorkflowData/XMLEncoded],
""",
"""
)