Comments module: new sanitisation strategy for body
Comments module: new sanitisation strategy for body

Don’t sanitise on submission, do it when filtering for display. This
closes a loophole that would allow commenters to use tags via Markdown
that are not allowed via plain HTML, and it allows old comments to
display newly allowed tags if the admin settings are changed.

xenocrat/chyrp-lite,xenocrat/chyrp-lite