README.md

测试一下：
<script>alert('XSS Attack!')</script>  
<img src=x onerror="alert('XSS via img tag')">
<iframe src="javascript:alert('XSS')"></iframe>  
<svg onload="alert('XSS')"></svg>