Fix a xss vulnerability

Fix a xss vulnerability at showRankList.do。