Yii 框架missingAction函数xss漏洞分析解决

/**
 * Handles the request whose action is not recognized.
 * This method is invoked when the controller cannot find the requested action.
 * The default implementation simply throws an exception.
 * @param string $actionID the missing action name
 * @throws CHttpException whenever this method is invoked
 */
public function missingAction($actionID)
{
    throw new CHttpException(404,Yii::t('yii','The system is unable to find the requested action "{action}".',
        array('{action}'=>$actionID==''?$this->defaultAction:$actionID)));  }

throw new CHttpException(404,Yii::t('yii','The system is unable to find the requested action "{action}".',
        array('{action}'=>htmlspecialchars($actionID==''?$this->defaultAction:$actionID))));    }