XSS secure comment output

On line 27, if you enter comment like "<script>alert('hello');</script>", it will no longer execute the alert.