Remembered that the issue was that markdown bypassed the htmlescape
Remembered that the issue was that markdown bypassed the htmlescape

 - can put malicious image urls in markdown
 - need to strip images as well as escape html
blake-education/discuss,blake-education/discuss,blake-education/discuss