Improve comment sanitizing.
Escape with ENT_XML1 when appropriate.