Markdown and Cross Site Scripting