xss防御

http://blog.csdn.net/ghsau/article/details/17027893