Html and JS code in comments should be escaped
Html and JS code in comments should be escaped

If some comments contains html code, it is interpreted directly
by the browser. And if it contains a script element with JS code,
the JS code is executed!

It mustn't be done.

jreinhardt/handkerchief,jreinhardt/handkerchief,jreinhardt/handkerchief