过滤字符串中的HMTL实体

sourceStr.replaceAll("&", "&").replaceAll("\"", """)       .replaceAll("<","<").replaceAll(">",">");