I checked the spec for xml-to-json()

Note that the version 4 of that function allows an option to prevent
escaping the slash/solidus e.g.

xml-to-json(<string key="data"
xmlns="http://www.w3.org/2005/xpath-functions">http://example.com/foo/bar</st
ring>,
{ 'escape-solidus' : false() })