字符串转化
bug fixed of xss