fixed xss bug in commentsPage
make dev green