You are looking at the HTML representation of the XML format.
HTML is good for debugging, but is unsuitable for application use.
Specify the format parameter to change the output format.
To see the non HTML representation of the XML format, set format=xml.
See the complete documentation, or API help for more information. 
<?xml version="1.0"?>
<api>
  <query>
    <random>
      <page id="3492" ns="0" title="如何登录WhatsApp网页版658" />
      <page id="3011" ns="0" title="Test&#039; UNION ALL SELECT NULL,NULL,NULL,NULL-- iNSr" />
    </random>
  </query>
</api>