Fix security issue : xss
Fix security issue: directory traversal
Fix security issue : xss