Update handlers.py

Prevent comments from injecting JS into the Timeline and being executed.