fix: comment -> no html allowed

src/QUI/ERP/Order/AbstractOrder.php

@@ -1483,6 +1483,8 @@ public function count()
      */
     public function addComment($message)
     {
+        $message = \strip_tags($message);
+
         $this->Comments->addComment($message);
     }