Post function module browsing post content exists storage xss, when the user publishes the article, the content format of the article is not filtered, can leak sensitive information. Once you get the post information, send the data directly to edit.html
