Q3 travel, awaiting approval.
Comments are stored and rendered unencoded. And the id is a direct object reference with no ownership check - read ticket #102.