add #escape to avoid xxs

Author: litongjava

frameworks/Java/tio-server/src/main/java/com/litongjava/tio/http/server/controller/DbController.java

@@ -112,7 +112,7 @@ public HttpResponse fortunes(HttpRequest request) throws IllegalAccessException,
       fortunes.add(BeanConverterUtils.toBean(record.toMap(), Fortune.class));
     }
     // 添加额外的 Fortune
-    fortunes.add(new Fortune(0, "Additional fortune added at request time."));
+    fortunes.add(new Fortune(0L, "Additional fortune added at request time."));
 
     // 按照消息排序
     fortunes.sort(Comparator.comparing(Fortune::getMessage));

frameworks/Java/tio-server/src/main/java/com/litongjava/tio/http/server/model/Fortune.java

@@ -2,18 +2,18 @@
 
 public final class Fortune {
 
-  public Integer id;
+  public Long id;
   public String message;
 
   public Fortune() {
   }
 
-  public Fortune(Integer id, String message) {
+  public Fortune(Long id, String message) {
     this.id = id;
     this.message = message;
   }
 
-  public Integer getId() {
+  public Long getId() {
     return id;
   }
 

frameworks/Java/tio-server/src/main/resources/templates/fortunes.html

@@ -12,7 +12,7 @@
   #for(fortune : fortunes)
   <tr>
     <td>#(fortune.id)</td>
-    <td>#(fortune.message)</td>
+    <td>#escape(fortune.message)</td>
   </tr>
   #end
 </table>