Issue #1301814 by David_Rothstein: Fixed Comment module security fix from SA-CORE-2011-003 not yet applied to Drupal 8.