add fliter xss
remove xss cause there is a t()
Merge pull request #91 from yqjiang/7.x-add-fliter-xss

add fliter xss