sanitize markdown output

Previously, a carefully crafted code submission could introduce
unsafe HTML into a submissions page.