modify config.js
fix xss data url
update config