How to Convert Markdown to HTML

Problem

You have Markdown content and need to render it as HTML on a web page.

Prerequisites

• Understanding of Markdown syntax
• Knowledge of HTML

Steps

1. 1. Parse the Markdown

   Use a Markdown parser to convert the text to an HTML AST. The parser handles headings, bold, italic, lists, code blocks, links, images, and tables. Choose a parser that supports the Markdown flavor you are using (CommonMark, GFM, MDX).

   Input

   # Hello\n**bold** text

   Output

   parsed AST

2. 2. Render to HTML

   Serialize the AST to HTML. The output includes appropriate HTML tags: <h1> for headings, <strong> for bold, <ul>/<li> for lists, <pre><code> for code blocks. Ensure the parser handles edge cases like nested lists and reference-style links.

   Input

   # Hello\n**bold**

   Output

   <h1>Hello</h1>\n<p><strong>bold</strong></p>

3. 3. Sanitize the HTML output

   Markdown can contain raw HTML, which is an XSS risk. Pass the output through an HTML sanitizer (like DOMPurify) that allows safe tags and attributes but removes scripts, event handlers, and dangerous URLs. Never render unsanitized Markdown HTML.

   Input

   raw HTML output

   Output

   sanitized, safe HTML

Expected result

Safe HTML that renders the Markdown content without XSS vulnerabilities.

Common errors

Raw HTML in Markdown causes XSS

Use a Markdown parser that can disable raw HTML, or sanitize the output with an allowlist-based HTML sanitizer.

Markdown flavor not supported

Choose a parser that supports your flavor. GFM adds tables and strikethrough; CommonMark is the standard baseline.

Troubleshooting

• If output looks wrong, check the Markdown flavor and parser options.
• If tables or other GFM features don't render, enable GFM support in the parser.

Security limits

• Always sanitize Markdown-to-HTML output. Raw HTML in Markdown is a common XSS vector.