I have been trying to research my way out of having to write a markdown parser that doesn't allow inline html because I don't want to be a markdown author, but I categorically don't want people being able to inject things into the wiki(s) I need to create. In some languages it's a flag. In others, there's no flag.

This is like not using bind variables on your sql library. I just don't understand it. I'm looking at you, Crockford.