fix xss on title
Release 2.0.0-rc.1