the last point is more critical and difficult to do it right. Comments are vulnerable to all sorts of xss/injection attacks and the functions that scan for them

the last point is more critical and difficult to do it right. Comments are vulnerable to all sorts of xss/injection attacks and the functions that scan for them will have to be updated frequently..