I noticed this while perusing this site. See T9555#140054 for example. This doesn't seem to happen in the preview for making a task, but does for the preview (and full rendering) of making a comment
```name=evil comment
{P2031}
``` text here ``` ```
Produces:
{F3192853}
OSX 10.11.6, Firefox 51.0.1