对输入进行转义；修复dirname函数的拼写错误

Signed-off-by: hancong03 <hancong03@baidu.com>

native-support/archive/src/Parser.class.php

@@ -6,11 +6,11 @@ require_once "Parser.freemind.class.php";
 class Parser {
 
     public static function toXMind ( $source, $previewImage = null ) {
-        return XMindParser::parse( $source, $previewImage );
+        return XMindParser::parse( htmlspecialchars( $source, ENT_NOQUOTES ), $previewImage );
     }
 
     public static function toFreeMind ( $source ) {
-        return FreeMindParser::parse( $source );
+        return FreeMindParser::parse( htmlspecialchars( $source, ENT_NOQUOTES ) );
     }
 
 }
\ No newline at end of file

native-support/archive/src/Parser.xmind.class.php

@@ -198,7 +198,7 @@ class XMindParser {
 
     private static function move ( $meta, $path ) {
 
-        $config = require( diranme( __FILE__ ) . '/../config.php' );
+        $config = require( dirname( __FILE__ ) . '/../config.php' );
         $savepath = $config[ 'savepath' ];
 
         if ( !file_exists( $savepath ) ) {