diff --git a/dtmsvr/api_http.go b/dtmsvr/api_http.go
index 2ba8373..2ca1da0 100644
--- a/dtmsvr/api_http.go
+++ b/dtmsvr/api_http.go
@@ -64,7 +64,7 @@ func registerBranch(c *gin.Context) interface{} {
 	err := c.BindJSON(&data)
 	e2p(err)
 	branch := TransBranch{
-		Gid:      data["gid"],
+		Gid:      dtmimp.Escape(data["gid"]),
 		BranchID: data["branch_id"],
 		Status:   dtmcli.StatusPrepared,
 		BinData:  []byte(data["data"]),
diff --git a/dtmsvr/trans_class.go b/dtmsvr/trans_class.go
index 2eae58c..be60ac8 100644
--- a/dtmsvr/trans_class.go
+++ b/dtmsvr/trans_class.go
@@ -76,6 +76,8 @@ func TransFromContext(c *gin.Context) *TransGlobal {
 	e2p(err)
 	m := TransGlobal{}
 	dtmimp.MustUnmarshal(b, &m)
+	m.Status = dtmimp.Escape(m.Status)
+	m.Gid = dtmimp.Escape(m.Gid)
 	logger.Debugf("creating trans in prepare")
 	m.setupPayloads()
 	m.Ext.Headers = map[string]string{}