Index: branches/unlabeled/unlabeled-1.24.2/core/kernel/parser/template_parser.php
===================================================================
diff -u -r5980 -r6078
--- branches/unlabeled/unlabeled-1.24.2/core/kernel/parser/template_parser.php	(.../template_parser.php)	(revision 5980)
+++ branches/unlabeled/unlabeled-1.24.2/core/kernel/parser/template_parser.php	(.../template_parser.php)	(revision 6078)
@@ -333,7 +333,7 @@
 		}
 
 		if ($opening_tag == '<!--') {
-			$this->AppendOutput('<!-- '.$tag. '-->');
+			$this->AppendOutput('<!-- '.htmlspecialchars($tag). '-->');
 			$tag = '__COMMENT__';
 		}