Styling and xss protection in list_comments