Disallowing raw html from being rendered in comments