This is a good article although it would help folks if the typo "bidding parameters" got fixed to "binding parameters" as that threw me at first.

Given how flexible the XML parser is, and what with CROSS APPLY and CTE queries, what we do is setup parameters in the database in a table dedicated to that purpose. Might not work for everybody...