Fixed security bugs in comments