diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6e768ce2..21618795 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,11 @@
 # 更新日志
 > 有空会补补BUG、添添新功能。    
 > 同时也欢迎大家的参与！感谢各位朋友的支持！ .TAT.
+## `v(2.0.7.2)`
+
+* Fix #150 文件路径输入框未过滤问题
+* 修复目录树双击时引起console下报错问题
+* 修正 aslistcmd 二次转义问题
 
 ## `v(2.0.7.1)`
 
diff --git a/source/app.entry.js b/source/app.entry.js
index 362436ea..382ca927 100644
--- a/source/app.entry.js
+++ b/source/app.entry.js
@@ -28,6 +28,7 @@ const antSword = window.antSword = {
   noxss: (html = '', wrap = true) => {
     let _html = String(html)
       .replace(/&/g, "&")
+      .replace(/'/g, "'")
       .replace(/>/g, ">")
       .replace(/</g, "&lt;")
       .replace(/"/g, "&quot;");
diff --git a/source/modules/filemanager/files.js b/source/modules/filemanager/files.js
index 54a7ea39..8891db36 100644
--- a/source/modules/filemanager/files.js
+++ b/source/modules/filemanager/files.js
@@ -97,7 +97,7 @@ class Files {
           options: bookmark_opts
         },
         { type: 'separator' },
-        { id: 'path', width: 300, type: 'buttonInput', value: manager.path || 'loading..' },
+        { id: 'path', width: 300, type: 'buttonInput', value: antSword.noxss(manager.path) || 'loading..' },
         { id: 'read_path', type: 'button', icon: 'arrow-right', text: LANG['toolbar']['read'] },
         { type: 'separator' }
       ]);