code formating
Fix xss security bug