Parse HTML tags

[xplosionmind]

Is your feature request related to a problem? Please describe.
HTML tags are displayed as plain text and not rendered, as it should happen since it is a superset of Markdown. Example below

Describe the solution you'd like
HTML tags should be rendered normally, or at least tags should be stripped and only the text inside them should be displayed

Describe alternatives you've considered
There is none

Additional context
I do not know what I could add but I am available for clarifications

[luka-nextcloud]

It's still reproduceable.

[max-nextcloud]

The underlying issue here is that there are a lot of ways html tags can be used to perform actions on behalf of anyone who opens the page. These attacks are called XSS - cross site scripting attacks.
The most simple example would be injecting a <script> tag that can perform arbitrary javascript such as sharing a file, deleting data, leaking the users session cookie.

So we could exclude <script> tags, but there are a LOT of ways to make the browser execute javascript. There are sanitizers for this but so far we are sticking with the recommendation of markdown-it:

Don't enable HTML. Extend markup features with plugins. We think it's the best choice and use it by default.

• That's ok for 99% of user needs.
• Output will be safe without sanitizer.