diff --git a/server/handler/link_auth.go b/server/handler/link_auth.go
index e9794ad..9e3dd6f 100644
--- a/server/handler/link_auth.go
+++ b/server/handler/link_auth.go
@@ -1,6 +1,7 @@
 package handler
 
 import (
+	"bytes"
 	"crypto/md5"
 	"encoding/xml"
 	"fmt"
@@ -14,7 +15,6 @@ import (
 	"github.com/bjdgyc/anylink/base"
 	"github.com/bjdgyc/anylink/dbdata"
 	"github.com/bjdgyc/anylink/sessdata"
-	"golang.org/x/net/html"
 )
 
 var profileHash = ""
@@ -155,11 +155,12 @@ func tplRequest(typ int, w io.Writer, data RequestData) {
 		return
 	}
 
-	if strings.Contains(data.Banner, "\n") {
-		// 替换xml文件的换行符
-		data.Banner = strings.ReplaceAll(data.Banner, "\n", "
")
-		data.Banner = html.EscapeString(data.Banner)
+	if data.Banner != "" {
+		buf := new(bytes.Buffer)
+		xml.EscapeText(buf, []byte(data.Banner))
+		data.Banner = buf.String()
 	}
+
 	t, _ := template.New("auth_complete").Parse(auth_complete)
 	_ = t.Execute(w, data)
 }