字符串转化
bug fixed of xss
Merge pull request #6 from node200ok/master

merge from source