Baidu Post Bar iPad extended XSS and repair solutions

I was not at home these days and could not use my computer, so I accidentally discovered this o. o.
Because no computer is used, illustration is very troublesome. So we will not illustrate it. Use the iPad to log on to the post. All the reply content is not encoded. Therefore, sending is an image, and sending <script> <style> ...... all works. But this is only true for iPad.
Http://tieba.baidu.com/p/2508389458 with pad version into this post, will close after loading. I directly sent this: <script> window. close () </script> the complete DIV is input by the user.
Solution:

Encoding?