fix item  name xss
Merge pull request #2 from mycolorway/rc-fix-xss

fix item  name xss