Ok to use marked in first react challeng

Hi there, I am new to react.js and have nearly finished the challenge with the markdown app. The suggestion is to use “marked.js” but I am finding now on stack overflow that there are xss scurity issues with this, and I can’t find that the library is maintained. What other libraries are people using for this challenge that do not have security issues. Any help greatly appreciated.

I did find this website

which says that the version 0.3.6 fixes the problem,

but would still like to know which other markdown packages people think are more secure.


You don’t have to worry about XSS unless you’re sending data to a server, and even then it’s not an issue unless there’s user account data involved. I don’t know of any other markdown packages, though.


Thanks for your response. I decided to use marked.js for the project.