xss 防范

https://www.npmjs.com/package/xss

xss的案例：

https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#onerror

https://xss.haozi.me/#/0x00