fix xss bug, like nickname input
Merge pull request #6 from Fritz-Lium/master

fix xss bug, like nickname input