v2.4 Engine Live•Sub-2ms XSS-Safe Markdown Parsing

Markdown to Sanitized HTML. At the Edge.

Ditch bloated local parser dependencies, recurring CVE security advisories, and fragile regexes. One single, deterministic, sub-2ms edge endpoint for all your apps.

Test Live Playground API Reference

textoolsai-repl • playground.edge.worker

INPUT_PAYLOAD.md

1163 chars•GFM Enabled

# textoolsai v2.4 Engine

Transform raw user-submitted Markdown into **deterministic, XSS-sanitized HTML** at sub-millisecond edge latency.

## Live XSS Protection Test

<script>alert('Vulnerable XSS Attack Triggered!')</script>
<img src="x" onerror="alert('Exploit')" alt="Malicious image payload" />

> *"Ditching 6 separate Markdown parser packages for one deterministic REST endpoint saved us 300 hours of dependency CVE triage."*

```typescript
// Call textoolsai directly with zero client dependencies
const res = await fetch("https://textoolsai.org/api/convert", {
  method: "POST",
  headers: {
    "Authorization": "Bearer tt_live_948f2c01e74a...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({ markdown: "# Clean Output" })
});
```

1.80ms

DOMPurify Active: All malicious scripts & tags removed

XSS-Immune Output

One Line of Code. Zero Parser Maintenance.

Call https://textoolsai.org/api/convert from any backend runtime, Edge worker, or lambda service.

curl -X POST https://textoolsai.org/api/convert \
  -H "Authorization: Bearer tt_live_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "markdown": "# Hello from textoolsai\n\n**Safe & fast**.",
    "options": { "gfm": true }
  }'

Engineered for Mission-Critical Infrastructure

Why fast-growing SaaS products replace ad-hoc npm markdown libraries with textoolsai.

Zero XSS Vulnerabilities

Strict server-side DOM sanitization via DOMPurify blocks malicious <script> tags, iframe hijacks, and rogue onerror attributes before HTML ever enters your data layer.

OWASP Top 10 Compliant

Global Edge Execution

Distributed across 300+ global edge locations worldwide. Microsecond parser runtime, sub-15ms regional p95 latency, and zero warm-up cold starts.

< 2ms Engine Parse Time

Zero Dependency Rot

Stop wrestling with incompatible versions of marked, remark, rehype, and sanitize-html. Never patch a weekly parser vulnerability again.

Deterministic REST API

Simple, Predictable Developer Pricing

Start building for free in the sandbox. Upgrade for production-grade throughput and SLA.

Free Sandbox

Community

For prototyping, local development, and exploratory playground experimentation.

$0/ forever

Interactive in-browser playground
100 test calls / day limit
GitHub-Flavored Markdown (tables, code)
XSS sanitation via DOMPurify

Use Free Sandbox

Instant Provisioning

Pro Production API

Recommended

For production web apps, content platforms, CMS engines, and high-velocity SaaS.

$9/ month

50,000 requests / month
Instant cryptographically generated tt_live_ key
Sub-2ms SLA & 99.99% edge uptime
Automated zero-touch Stripe billing
Commercial SaaS license & email support