A Formal Spec for GitHub Flavored Markdown
<a href="https://github.github.com/gfm/#disallowed-raw-html-extension-" rel="nofollow">https://github.github.com/gfm/#disallowed-raw-html-extension...</a><p>Why this? This is not a working blacklist to prevent XSS (e.g. onload="...")