+ escape user input api.comment->commentSet()
+ fix checkbox module comment