commit

app/models/store/StoreOrder.php

@@ -440,7 +440,7 @@ class StoreOrder extends BaseModel
                 'pay_type' => $payType,
                 'use_integral' => $usedIntegral + $payIntegral,
                 'gain_integral' => $gainIntegral,
-                'mark' => $mark,
+                'mark' => htmlspecialchars($mark),
                 'combination_id' => $combinationId,
                 'pink_id' => $pinkId,
                 'seckill_id' => $seckill_id,