fix xss
Merge pull request #1 from ym405nm/fix_xss

FIX XSS