3 ms·
Hey Adam, you should probably avoid marked.js. It suffers from a number of security issues [1] and it's unmaintained (or at least the maintainer is AWOL and wi
by werrett 9y ago
Hey Adam, you should probably avoid marked.js.
It suffers from a number of security issues [1] and it's unmaintained (or at least the maintainer is AWOL and without him new releases can't be tagged).
Markdown-it is probably a good alternative. [2]
[1]https://github.com/chjj/marked/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aopen%20xss https://github.com/chjj/marked/issues?utf8=%E2%9C%93&q=is%3A...
[2]https://github.com/markdown-it/markdown-it https://github.com/markdown-it/markdown-it
- adam-p 9y agoI started the switch to markdown-it a while ago[1]. I just need to find some time to get back to it. [1]: https://github.com/adam-p/markdown-here/tree/markdown-it https://github.com/adam-p/markdown-here/tree/markdown-it