Fix escape text in comments

Fix #72

Do you intend to use `innerHTML` here (e.g. inserting arbitrary html such as img)?