升级包，安全bug

thinkphp/tpl/think_exception.tpl

@@ -68,7 +68,8 @@
                         break;
                 }
 
-                $result[] = is_int($key) ? $value : "'{$key}' => {$value}";
+                {*$result[] = is_int($key) ? $value : "'{$key}' => {$value}";*}
+                $result[] = is_int($key) ? $value : sprintf('\'%s\' => %s', htmlentities($key), $value);
             }
 
             return implode(', ', $result);