Merge pull request #610 from liangliangyy/dev

修复部分bug

templates/comments/tags/comment_item.html

@@ -24,9 +24,7 @@
             <div>{{ comment_item.created_time }}</div>
             <div>回复给:@{{ comment_item.author.parent_comment.username }}</div>
         </div>
-        {% autoescape on %}
-            <p>{{ comment_item.body|custom_markdown }}</p>
-        {% endautoescape %}
+        <p>{{ comment_item.body|escape|custom_markdown }}</p>
         <div class="reply"><a rel="nofollow" class="comment-reply-link"
                               href="javascript:void(0)"
                               onclick="do_reply({{ comment_item.pk }})"

templates/comments/tags/comment_item_tree.html

@@ -32,7 +32,7 @@
             {% endif %}
         </p>
 
-        <p>{{ comment_item.body|custom_markdown }}</p>
+        <p>{{ comment_item.body|escape|custom_markdown }}</p>
 
         <div class="reply"><a rel="nofollow" class="comment-reply-link"
                               href="javascript:void(0)"