Fix HTML injection in editing comments.