How it works
Markdown is parsed by marked with GFM enabled, then the resulting HTML passes through DOMPurify to strip any unsafe scripts or attributes before being rendered.
FAQ
Is the output safe to drop into my page? Yes. The HTML is sanitized with DOMPurify before being rendered, so any script tags or event handlers in the source Markdown are stripped.
Which Markdown flavour is supported? GitHub-Flavoured Markdown via the marked library — tables, fenced code blocks, task lists, strikethrough, autolinks, and line breaks all work.
Is my Markdown sent anywhere? No. Parsing happens locally via marked + DOMPurify, both bundled with the page.