[support] Security issue with comment form