Read-side markdown rendering (goldmark, GFM + hard wraps) with mandatory bluemonday sanitization of the output — these are user input. goldmark stays in safe mode (raw HTML not rendered) and the output is sanitized regardless, so it's safe twice over; on a render error it falls back to escaped plain text. - detailInner.Description / commentView.Body are now sanitized template.HTML. - Body switched from <p> to <div class="markdown"> (block-level output); comments get the markdown class too. Dark-theme styles for code/pre/lists/quotes/tables. - Write side stores raw markdown source unchanged; the edit form still shows the raw source. Verified in-browser: **bold**, `code`, links, lists, fenced blocks all render; <script>, img onerror, and javascript: links are stripped to inert text. Refs tasks/richer-detail-content.md (markdown done; auto-ticking relative time still pending). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>