fixed #161 xss process after markdown transfer