Re:Use AWS Lambda to self-host the comments for your blog
by jimpick on Friday May 06, 2016 @02:55PM
(#11645942)
My approach was to just pump the entire comment through the "markdown-it" markdown processor, which promises to emit safe HTML. It's a popular project, so I'm banking on the fact that they go a good job of sanitizing in their pipeline.
TBH, the thought of managing the attack surface of comments is kind of scary... Will definitely be referring back to this.