Ok to use marked in first react challeng

1

Hi there, I am new to react.js and have nearly finished the challenge with the markdown app. The suggestion is to use “marked.js” but I am finding now on stack overflow that there are xss scurity issues with this, and I can’t find that the library is maintained. What other libraries are people using for this challenge that do not have security issues. Any help greatly appreciated.

2

I did find this website


which says that the version 0.3.6 fixes the problem,

but would still like to know which other markdown packages people think are more secure.

thanks.

3

You don’t have to worry about XSS unless you’re sending data to a server, and even then it’s not an issue unless there’s user account data involved. I don’t know of any other markdown packages, though.

3 Likes
4

Thanks for your response. I decided to use marked.js for the project.