diff --git a/package-lock.json b/package-lock.json
index 3dbaa3f49..5c7935c68 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5474,9 +5474,9 @@
       }
     },
     "xmldom": {
-      "version": "0.1.27",
-      "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.1.27.tgz",
-      "integrity": "sha1-1QH5ezvbQDr4757MIFcxh6rawOk="
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.5.0.tgz",
+      "integrity": "sha512-Foaj5FXVzgn7xFzsKeNIde9g6aFBxTPi37iwsno8QvApmtg7KYrr+OPyRHcJF7dud2a5nGRBXK3n0dL62Gf7PA=="
     },
     "xmlhttprequest-ssl": {
       "version": "1.5.5",
diff --git a/package.json b/package.json
index dfee95aca..0982c6c09 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
     "styled_string": "0.0.1",
     "tap-parser": "^7.0.0",
     "tmp": "0.0.33",
-    "xmldom": "^0.1.19"
+    "xmldom": "^0.5.0"
   },
   "files": [
     "lib",
diff --git a/tests/ci/reporter_tests.js b/tests/ci/reporter_tests.js
index b920b874b..853885c32 100644
--- a/tests/ci/reporter_tests.js
+++ b/tests/ci/reporter_tests.js
@@ -768,7 +768,7 @@ describe('test reporters', function() {
       reporter.finish();
       var output = stream.read().toString();
       assert.match(output, /<testsuite name="Testem Tests" tests="1" skipped="0" failures="0" timestamp="(.+)" time="(\d+(\.\d+)?)">/);
-      assert.match(output, /<testcase classname="phantomjs" name="it does &lt;cool> &quot;cool&quot; 'cool' stuff"/);
+      assert.match(output, /<testcase classname="phantomjs" name="it does <cool> &quot;cool&quot; 'cool' stuff" time="0"\/>/);
 
       assertXmlIsValid(output);
     });
@@ -950,7 +950,7 @@ describe('test reporters', function() {
       reporter.finish();
       var output = stream.read().toString();
       assert.match(output, /it failed with quotes"/);
-      assert.match(output, /&lt;it> &quot;crapped&quot; out/);
+      assert.match(output, /<it> &quot;crapped&quot; out/);
 
       assertXmlIsValid(output);
     });