Escape raw HTML

$ comrak --escape -t commonmark -t xml

<i>italic text</i>

<p>&lt;i&gt;italic text&lt;/i&gt;</p>

<i>italic text</i>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE document SYSTEM "CommonMark.dtd">
<document xmlns="http://commonmark.org/xml/1.0">
  <paragraph>
    <html_inline xml:space="preserve">&lt;i&gt;</html_inline>
    <text xml:space="preserve">italic text</text>
    <html_inline xml:space="preserve">&lt;/i&gt;</html_inline>
  </paragraph>
</document>

$ comrak -t commonmark -t xml

<i>italic text</i>

<p><!-- raw HTML omitted -->italic text<!-- raw HTML omitted --></p>

<i>italic text</i>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE document SYSTEM "CommonMark.dtd">
<document xmlns="http://commonmark.org/xml/1.0">
  <paragraph>
    <html_inline xml:space="preserve">&lt;i&gt;</html_inline>
    <text xml:space="preserve">italic text</text>
    <html_inline xml:space="preserve">&lt;/i&gt;</html_inline>
  </paragraph>
</document>

$ comrak --escape -t commonmark -t xml

<script>
alert('xyz');
</script>

Possibly <marquee>annoying</marquee>.

[Dangerous](javascript:alert(document.cookie)).

[Safe](http://commonmark.org).

&lt;script&gt;
alert('xyz');
&lt;/script&gt;
<p>Possibly &lt;marquee&gt;annoying&lt;/marquee&gt;.</p>
<p><a href="">Dangerous</a>.</p>
<p><a href="http://commonmark.org">Safe</a>.</p>

<script>
alert('xyz');
</script>

Possibly <marquee>annoying</marquee>.

[Dangerous](javascript:alert\(document.cookie\)).

[Safe](http://commonmark.org).

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE document SYSTEM "CommonMark.dtd">
<document xmlns="http://commonmark.org/xml/1.0">
  <html_block xml:space="preserve">&lt;script&gt;
alert('xyz');
&lt;/script&gt;
</html_block>
  <paragraph>
    <text xml:space="preserve">Possibly </text>
    <html_inline xml:space="preserve">&lt;marquee&gt;</html_inline>
    <text xml:space="preserve">annoying</text>
    <html_inline xml:space="preserve">&lt;/marquee&gt;</html_inline>
    <text xml:space="preserve">.</text>
  </paragraph>
  <paragraph>
    <link destination="javascript:alert(document.cookie)" title="">
      <text xml:space="preserve">Dangerous</text>
    </link>
    <text xml:space="preserve">.</text>
  </paragraph>
  <paragraph>
    <link destination="http://commonmark.org" title="">
      <text xml:space="preserve">Safe</text>
    </link>
    <text xml:space="preserve">.</text>
  </paragraph>
</document>

$ comrak --escape --unsafe -t commonmark -t xml

<script>
alert('xyz');
</script>

Possibly <marquee>annoying</marquee>.

[Dangerous](javascript:alert(document.cookie)).

[Safe](http://commonmark.org).

&lt;script&gt;
alert('xyz');
&lt;/script&gt;
<p>Possibly &lt;marquee&gt;annoying&lt;/marquee&gt;.</p>
<p><a href="javascript:alert(document.cookie)">Dangerous</a>.</p>
<p><a href="http://commonmark.org">Safe</a>.</p>

<script>
alert('xyz');
</script>

Possibly <marquee>annoying</marquee>.

[Dangerous](javascript:alert\(document.cookie\)).

[Safe](http://commonmark.org).

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE document SYSTEM "CommonMark.dtd">
<document xmlns="http://commonmark.org/xml/1.0">
  <html_block xml:space="preserve">&lt;script&gt;
alert('xyz');
&lt;/script&gt;
</html_block>
  <paragraph>
    <text xml:space="preserve">Possibly </text>
    <html_inline xml:space="preserve">&lt;marquee&gt;</html_inline>
    <text xml:space="preserve">annoying</text>
    <html_inline xml:space="preserve">&lt;/marquee&gt;</html_inline>
    <text xml:space="preserve">.</text>
  </paragraph>
  <paragraph>
    <link destination="javascript:alert(document.cookie)" title="">
      <text xml:space="preserve">Dangerous</text>
    </link>
    <text xml:space="preserve">.</text>
  </paragraph>
  <paragraph>
    <link destination="http://commonmark.org" title="">
      <text xml:space="preserve">Safe</text>
    </link>
    <text xml:space="preserve">.</text>
  </paragraph>
</document>