Added protection against code injection in comments: contained
js,html,...
doesn't get executed anymore, while preserving the linebreak and other
white space formatting of comments