Comment Protection

You can use DataGuard feature in ASM . Even though HTML comments are not credit card / Social Security numbers they can still be sensitive data which should not leak to attackers.

Dataguard can mask the sensitive data with asterisks and raise a violation when comment is found.

You will need a Regular Expression for HTML comments, here is an example:

https://blog.ostermiller.org/find-comments-html