v1.5.2

1.limit upload file (defense .html xss)
2.fix a upload bug: chinese dir mistake