use safe markdown for comments to prevent xss