We need to investigate into how to clean markdown on the server side. If someone were to send markdown with malicious javascript code in it we would not want to provide that to the client. However, the vue client does use a library to strip markdown of malicious code before displaying it.