fix a xss issue
Merge pull request #184 from 2betop/dev

fix a xss issue