showdown-xss-config

Showdown extension to filter XSS, using leizongmin/js-xss.

Client-side

<script src="/path/to/showdown/src/showdown.js"></script>
<script src="/path/to/xss/dist/xss.min.js"></script>
<script src="/path/to/showdown-xss-config.js"></script>

var converter = new showdown.Converter({ extensions: [xssfilter()] })
var text = "<script>alert('xss!')</script>";
console.log(converter.makeHtml(text));

Note: be sure to include the dependency on leizongmin/js-xss before this extension.

Server-side (node)

var showdown = require('showdown');
var xssFilter = require('showdown-xss-filter');
var converter = new showdown.Converter({extensions: [xssFilter()]});

var text = "<script>alert('xss!')</script>";
console.log(converter.makeHtml(text));