Using character entities, e.g. & to give an &, works on submitting the comment, but editing the comment populates the form's area with an unescaped ampersand causing corruption on submitting the form. Encoding and decoding needs to be symmetrical.
Cheers, Ralph.