When I set the value of the WMD textarea the normal way it display escaped HTML.
<textarea><b>kur</b></textarea>
this displays
<b>kur</b>
instead of kur
EDIT: Ended up sending the markdown to the server and using PHP Markdown to convert it to HTML and storing both in the DB.
Are there any vulnerabilities doing it this way? Should I check the HTML for anything?
Thank you!
Here is a similar question, I believe you can get your answer from there.
Can you have an html list inside a <textarea> and it look like a list?
Give it a go.