frontend protection against XXS attack

[saumye1]

Removes possibility of same page scripting through comments, and doesn't allow other HTML tags as well. The same be must be done at back-end(at server, before storing comments in database) also.