security

A Markdown renderer is a browser you didn't mean to write

Turning Markdown into a PDF means measuring text, breaking lines, paginating, and — the part I did not plan for — fetching arbitrary URLs on behalf of untrusted input.