removed comments for html injection