<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5" -->

---
title: Twenty years of Markdown hindsight, in one markup...
description: Carve is a new lightweight markup language designed to address 20 years of Markdown pain points. It keeps Markdown&#x27;s readability while fixing ambiguities:...
canonical: https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Twenty years of Markdown hindsight, in one markup language: Carve – DerEuroMark | daily.dev
og:description: Carve is a new lightweight markup language designed to address 20 years of Markdown pain points. It keeps Markdown&#x27;s readability while fixing ambiguities:...
og:url: https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5
og:image: https://api.daily.dev/og/posts/dlKDA0yS5.png
og:image:alt: Twenty years of Markdown hindsight, in one markup language: Carve – DerEuroMark
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Twenty years of Markdown hindsight, in one markup language: Carve – DerEuroMark

**[DerEuroMark](https://daily.dev/sources/dereuromark)** · 6 min read · 0 upvotes · 0 comments

## Summary

Carve is a new lightweight markup language designed to address 20 years of Markdown pain points. It keeps Markdown's readability while fixing ambiguities: single-character delimiters with visual mnemonics, a uniform word-boundary rule that keeps identifiers like snake_case safe, unambiguous list and code block parsing, and native rowspan/colspan table support. Security is normative in the spec — XSS and DoS protections, URL denylists, and linear-time parsing are required, not optional. Three reference implementations (JavaScript, PHP, Rust) produce byte-identical HTML verified against 388 conformance tests. It also ships document-grade features natively: footnotes, citations, cross-references, numbered figures, admonitions, math, and frontmatter. Editor support covers VS Code, JetBrains, Vim, Emacs, and more, with integrations for Hugo, Jekyll, Astro, WordPress, and others. A migration tool converts existing Markdown files.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.dereuromark.de/2026/07/13/twenty-years-of-markdown-hindsight-in-one-markup-language-carve>

## Questions this post answers

### What is Carve and how is it different from Markdown?

Carve is a lightweight markup language designed to fix long-standing Markdown pain points while keeping plain-text simplicity. It uses single-character delimiters for styles like bold and italic, enforces one unambiguous meaning per construct, supports native tables with rowspan and colspan, and requires a blank line before lists so numbered text is never misread as a list.

_Developers evaluating markup tooling choices can track alternatives like Carve alongside Markdown on daily.dev._

### How does Carve guarantee identical rendering across different implementations?

Carve ships three reference implementations, in JavaScript, PHP, and Rust, that produce byte-identical HTML output, verified against a conformance corpus of 388 pinned input/output pairs on every commit. Bindings also exist for Python, Ruby, Go, and WebAssembly, aiming to eliminate the common problem of a Markdown preview, CI renderer, and site generator disagreeing on the same file.

_Teams chasing consistent doc rendering across tools can follow markup language developments like this on daily.dev._

### How does Carve prevent XSS attacks compared to Markdown?

Carve's specification makes security hardening normative rather than optional, including URL scheme denylists, attribute sanitization, Trojan-Source and bidi-character stripping, and guaranteed linear-time parsing with bounded nesting, all backed by pinned conformance tests. Raw HTML is disabled by default and only passes through via an explicit per-format opt-in fence, unlike Markdown, which leaves sanitization entirely to each implementation.

_Developers hardening content pipelines against injection risks can follow markup security practices on daily.dev._

## Similar posts on daily.dev

- [From Markdown to Carve – DerEuroMark](https://daily.dev/posts/from-markdown-to-carve-dereuromark-xwphzkh3u) · DerEuroMark · 0 upvotes · 0 comments
- [Why Carve markup Changes How You Author Rich Text in Shopware 6 – DerEuroMark](https://daily.dev/posts/why-carve-markup-changes-how-you-author-rich-text-in-shopware-6-dereuromark-tvnkoxeqe) · DerEuroMark · 1 upvotes · 1 comments
- [Why the heck are we still using Markdown??](https://daily.dev/posts/why-the-heck-are-we-still-using-markdown--mud109xly) · Hacker News · 0 upvotes · 0 comments

---

Tags: [#webdev](https://daily.dev/tags/webdev), [#markdown](https://daily.dev/tags/markdown)

[View this post on daily.dev](https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Twenty years of Markdown hindsight, in one markup language: Carve – DerEuroMark","url":"https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5"},"datePublished":"2026-07-13T19:35:34.382Z","dateModified":"2026-09-13T21:29:46.576Z","description":"Carve is a new lightweight markup language designed to address 20 years of Markdown pain points. It keeps Markdown's readability while fixing ambiguities:...","image":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","thumbnailUrl":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","isAccessibleForFree":true,"articleSection":"DerEuroMark","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DerEuroMark","logo":"https://media.daily.dev/image/upload/s--OwbYUam1--/f_auto,q_auto/v1772962015/logos/dereuromark","url":"https://daily.dev/sources/dereuromark"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"webdev,markdown","timeRequired":"PT6M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DerEuroMark","item":"https://daily.dev/sources/dereuromark"},{"@type":"ListItem","position":3,"name":"Twenty years of Markdown hindsight, in one markup language: Carve – DerEuroMark"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/twenty-years-of-markdown-hindsight-in-one-markup-language-carve-dereuromark-dlkda0ys5#faq","mainEntity":[{"@type":"Question","name":"What is Carve and how is it different from Markdown?","acceptedAnswer":{"@type":"Answer","text":"Carve is a lightweight markup language designed to fix long-standing Markdown pain points while keeping plain-text simplicity. It uses single-character delimiters for styles like bold and italic, enforces one unambiguous meaning per construct, supports native tables with rowspan and colspan, and requires a blank line before lists so numbered text is never misread as a list. Developers evaluating markup tooling choices can track alternatives like Carve alongside Markdown on daily.dev."}},{"@type":"Question","name":"How does Carve guarantee identical rendering across different implementations?","acceptedAnswer":{"@type":"Answer","text":"Carve ships three reference implementations, in JavaScript, PHP, and Rust, that produce byte-identical HTML output, verified against a conformance corpus of 388 pinned input/output pairs on every commit. Bindings also exist for Python, Ruby, Go, and WebAssembly, aiming to eliminate the common problem of a Markdown preview, CI renderer, and site generator disagreeing on the same file. Teams chasing consistent doc rendering across tools can follow markup language developments like this on daily.dev."}},{"@type":"Question","name":"How does Carve prevent XSS attacks compared to Markdown?","acceptedAnswer":{"@type":"Answer","text":"Carve's specification makes security hardening normative rather than optional, including URL scheme denylists, attribute sanitization, Trojan-Source and bidi-character stripping, and guaranteed linear-time parsing with bounded nesting, all backed by pinned conformance tests. Raw HTML is disabled by default and only passes through via an explicit per-format opt-in fence, unlike Markdown, which leaves sanitization entirely to each implementation. Developers hardening content pipelines against injection risks can follow markup security practices on daily.dev."}}]}
```

