Keeps timing out.
Comments are stored and rendered unencoded. And the id is a direct object reference with no ownership check - read ticket #102.