Scripts in task comments

<script>window.alert("sometext");</script>

will actually execute when viewed in history.

Recreate (in task list):
1. Use 'Create task' to create and assign task to mary
2. As mary, use 'Add Comment', type in script text

and so mary can execute scripts for demo by

3. Reassign to demo
4. As demo, view in history