Fix XSS vulnerability in handling of pre-filled text
Security release: Fix XSS vulnerability, thanks to Kazutaka Miyasaka

It was possible to pass arbitrary HTML code into the comment form via
the URL on any page where a discussion form was displayed. Thus you
should update to this release as soon as possible.