remove_xss改为Security::removeXSS