fix a bug
forbid the Html