make css not influence markdown content
Avoid xss injections on text content
Add csrf to the form