If you were to take the GFM that was implemented on top of showdown and use it for something like a wiki (ala stackoverflow's wiki-fication of questions), then

If you were to take the GFM that was implemented on top of showdown and use it for something like a wiki (ala stackoverflow's wiki-fication of questions), then currently you have XSS holes. I love GFM. I've been using it on userscripts.org for months. But the JS version at http://github.github.com/github-flavored-markdown/preview.html http://github.github.com/github-flavored-markdown/preview.ht... has holes that their ruby version does not have - http://github.com/mojombo/github-flavored-markdown/issues/#issue/1 http://github.com/mojombo/github-flavored-markdown/issues/#i...