Markdown to HTML viewer
Overview
MarkdownToHTML
A widget which will render markdown text as HTML.
Features
- Show markdown text as HTML
- Option to Sanitize the HTML output
Installation
- Install widget from marketplace to your project
- Add the widget to the page
- Select the input attribute with the Markdown text
- Select if the HTML output should be sanitized or not
Usage
You can find more detailed information about using the Markdown structure here: https://github.com/showdownjs/showdown/wiki/Showdown's-Markdown-syntax
Also, you can find example text in the demo project. Emoji's are supported 😃!
Demo project
https://markdowntohtml-sandbox.mxapps.io
Issues, suggestions and feature requests
https://github.com/bjarnonderstalkobeon/markdownToHTML
Documentation
MarkdownToHTML
A widget which will render markdown text as HTML.
Features
- Show markdown text as HTML
- Option to Sanitize the HTML output
Installation
- Install widget from marketplace to your project
- Add the widget to the page
- Select the input attribute with the Markdown text
- Select if the HTML output should be sanitized or not
Usage
You can find more detailed information about using the Markdown structure here: https://github.com/showdownjs/showdown/wiki/Showdown's-Markdown-syntax
Also, you can find example text in the demo project. Emoji's are supported 😃!
Demo project
https://markdowntohtml-sandbox.mxapps.io
Issues, suggestions and feature requests
https://github.com/bjarnonderstalkobeon/markdownToHTML
Releases
## 🔒 Security release This major release addresses multiple security issues in the widget dependencies. ### Changes - ⬆️ **DOMPurify** `3.0.9` → `3.4.12` — resolves **CVE-2025-15599** and **CVE-2025-26791** (mXSS). - ♻️ **Replaced **`react-showdown` / `showdown`** with `markdown-it` (+ `markdown-it-emoji`). This completely eliminates the unpatchable Showdown ReDoS vulnerability (GHSA-rmmh-p597-ppvv). - 🛡️ **`Sanitize HTML` is now set to `true` by default** for new widget instances. The user-set value takes precedence. ### Feature parity (maintained) Tables, emojis (`:smile:` → 😄), underlines (`__text__` → ``), and DOMPurify sanitization work identically to the previous version. ### Verification - `npm run release` succeeds, Lint is clean. - `npm audit --omit=dev` → **0 vulnerabilities** in runtime dependencies. ### Installation Download `kobeon.MarkdownToHTML.mpk`, place it in the `widgets/` folder of your Mendix project, and sync (F4).