Using character entities, e.g. & to give an &, works on submitting the comment, but editing the comment populates the form's area with an unescaped ampersand causing corruption on submitting the form. Encoding and decoding needs to be symmetrical.
