diff --git a/applications/view/system/dept.py b/applications/view/system/dept.py
index 91941d84b8f566d8e2ccaaa1f9e5f6a35280db75..20e4a0946d027fb8d8aac723abd758b06bc25486 100644
--- a/applications/view/system/dept.py
+++ b/applications/view/system/dept.py
@@ -108,7 +108,8 @@ def dis_enable():
 @authorize("system:dept:edit", log=True)
 def update():
     json = request.get_json(force=True)
-    id = json.get("deptId"),
+    #id = json.get("deptId"),
+    id = str_escape(json.get("deptId"))
     data = {
         "dept_name": validate.str_escape(json.get("deptName")),
         "sort": validate.str_escape(json.get("sort")),