Tag

npm-showdown

Safeguard articles tagged "npm-showdown" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

Showdown Markdown Converter: XSS Risks and Safe Configuration

The npm showdown library converts Markdown to HTML without sanitizing it — by design. Here is where the XSS risk actually lives and how to render untrusted Markdown safely.

May 15, 20257 min read