Fix #221: Blockquote doesn't work

lib/util/xss.js

@@ -7,6 +7,7 @@ class Xss {
     let option = {
       stripIgnoreTag: true,
       css: false,
+      escapeHtml: (html) => html,
     };
     if (isAllowAllAttrs) {
       // allow all attributes