fix a xss security bug in insert post section