erusev/parsedown — pull request #236 by naNuke (2014-10-10 17:12:29+00:00)
Title: Ignore html comments as well with markupEscape option.

Hello again, I am quite sure there is some kind of xss attack possible with html comments in older internet explorers and I don't see a reason why any html aspects should be allowed in escape mode so escaping comments as well makes sense. If we are escaping markup, then escape everything imo ^^

Quite simple fix