Currently we use marked as markdown parser. There is several issues related to marked: - [security issue: regex DoS](https://nodesecurity.io/advisories/marked_redos) - [security issue: vbscript injection](https://nodesecurity.io/advisories/marked_vbscript_injection) - Status of the project (seems inactive): 81 PR opened, 179 issues We should use [markdown-it](https://github.com/markdown-it/markdown-it), it has all the features of marked and also an extensibility feature (for addons, ect.).
Currently we use marked as markdown parser. There is several issues related to marked:
We should use markdown-it, it has all the features of marked and also an extensibility feature (for addons, ect.).