Comment by bawolff

Comments affect the dom structure of parsed xml subtley. There were cases where this was enough to log in as a different user. See the link i provided.