I was concerned because the blog post said that the sanitized the input before sending it, and looking at the network requests agreed!

However while you can submit HTML directly it is displayed as text on the client anyways. So I am wondering why they even bother to "sanitize" it. It just munges the comments for no reason.