delete unused code
rename common/util.js to common/tools.js
去除 xss 模块