Made comments work and a bit safer (html/javascript injections still work)