Made getting the comment text more robust.

Especially call EscapeHtml() in case we unexpectedly failed to receive the renderedText, since we do not really know the content of `text` then.

Author: Sedeniono

src/Comments.js

@@ -5,7 +5,7 @@
 
 
 import { gWorkItemRESTClient } from './Globals';
-import { DiffHtmlText } from './Utils';
+import { DiffHtmlText, EscapeHtml } from './Utils';
 import { CommentFormat } from 'azure-devops-extension-api/Comments';
 
 
@@ -174,13 +174,20 @@ function GetHtmlFromComment(comment, commentOrUpdate)
     //     - format == markdown: GetCommentsRESTRequest(), `text`
     //                           GetCommentsVersionsRESTRequest(): Never (`text` contains ACK)
     // 
-    if (comment.format === undefined || comment.format === CommentFormat.Html || commentOrUpdate.renderedText === undefined) {
-        return commentOrUpdate.text; // For html, do NOT use renderedText! See above!
+    if (comment.format === undefined || comment.format === CommentFormat.Html) {
+        // If `format` is undefined, we have an old ADO version, implying html. 
+        // Moreover, the correct html is in `text`, not in `renderedText`. See above.
+        return commentOrUpdate.text;
     }
-    else {
-        // Probably a markdown comment, at least now (might have been html in earlier versions of the comment).
+    else if (commentOrUpdate.renderedText !== undefined) {
+        // Probably a markdown comment, at least in the latest comment version (might have been html in earlier
+        // versions of the comment, in which case `renderedText` is also fine; compare explanation above).
         return commentOrUpdate.renderedText;
     }
+    else {
+        // We shouldn't be able to reach this code here.
+        return EscapeHtml(commentOrUpdate.text);
+    }
 }