Hacker News new | ask | show | jobs
by nuclear_eclipse 6448 days ago
Markdown doesn't even try to solve the HTML sanitation issue because it was designed for use when you have complete control over the content, so it passes all HTML through in the clear so that you can use Markdown to make the usual/trivial stuff easier, and leave the complex stuff to how HTML designed it.

Because it ignores HTML altogether, you need to have a separate sanitation process if you only want a subset of HTML to be usable.

The story is the same with most other simple markup languages, like Textile.