fix xss
fix xss
Merge branch 'master' of https://github.com/ilife5/avalon.oniui

merge