fix

@@ -77,7 +77,7 @@ exports.index = (req, res, next) => {
  */
 exports.tags = (req, res, next) => {
 
-    let query = req.query.query;
+    let query = req.query.query = escape(req.query.query);
     let page = req.query.page || 1;
     let pageSize = req.query.pageSize || 20;
     let type = req.query.type || 0;

@@ -215,6 +215,13 @@ const renren = {
 const cancelBind = (req, res) => {
     let type = req.params.type;
 
+    if (!(req.get('Refer') || '').match(/yohobuy.com/)) {
+        return res.send({
+            code: 501,
+            message: '非法请求'
+        });
+    }
+
     if (!type) {
         res.status(400).json({
             code: 400,

@@ -17,16 +17,16 @@ module.exports = {
     cookieDomain: '.yohobuy.com',
     domains: {
         // test3
-        singleApi: 'http://api-test3.yohops.com:9999/',
-        api: 'http://api-test3.yohops.com:9999/',
-        service: 'http://service-test3.yohops.com:9999/',
-        serviceNotify: 'http://service-test3.yohops.com:9999/',
+        //singleApi: 'http://api-test3.yohops.com:9999/',
+        //api: 'http://api-test3.yohops.com:9999/',
+        //service: 'http://service-test3.yohops.com:9999/',
+        //serviceNotify: 'http://service-test3.yohops.com:9999/',
 
         // prod
-        // singleApi: 'http://single.yoho.cn/',
-        // api: 'http://api.yoho.cn/',
-        // service: 'http://service.yoho.cn/',
-        // serviceNotify: 'http://service.yoho.cn/',
+         singleApi: 'http://single.yoho.cn/',
+         api: 'http://api.yoho.cn/',
+         service: 'http://service.yoho.cn/',
+         serviceNotify: 'http://service.yoho.cn/',
 
         // gray
         // singleApi: 'http://single.gray.yohops.com/',

@@ -73,7 +73,7 @@ Dialog.prototype.packageInfo = function() {
             key = $this.attr('name');
 
         if (key) {
-            data[key] = $.trim($this.val());
+            data[key] = $.trim($('<div/>').text($this.val()).html());
         }
     });