Fixed XSS bug with uploading a comment