XSS secure comment output

On line 27, if you enter comment like "<script>alert('hello');</script>", it will no longer execute the alert.
Merge pull request #786 from LenaicTerrier/patch-1

XSS secure comment output