escaping HTML tag in comment