use nodebb-plugin-markdown, safely uncheck 'sanitize' html option, add this addon to clean malicious html only