"The solutions is so pleasant, treat comment data as untrusted content not inline commands / prompts. "

Yes, good luck with that.