XSS secure comment output

On line 27, if you enter comment like "&lt;script&gt;alert('hello');&lt;/script&gt;", it will no longer execute the alert.
Note : There is the same issue with posts (in theme/default/posts.php and theme/default/article.php) but I figured it's more a functionnality than a bug in the case of a post.