Mark 3.4.3 (#2063)

# 3.4.3 / 2022-03-07

**Security**

- Bump cmarkgfm to 0.8.0 to resolve CVE-2022-24724. Copied entry from 3.4.2 since 3.4.2 introduced a bug that prevented writing raw HTML.

**General**

- Fix issue where raw HTML would not be rendered in markdown

tests/utils/test_markdown.py

@@ -0,0 +1,12 @@
+from CTFd.utils import markdown
+
+
+def test_markdown():
+    """
+    Test that our markdown function renders properly
+    """
+    # Allow raw HTML / potentially unsafe HTML
+    assert (
+        markdown("<iframe src='https://example.com'></iframe>").strip()
+        == "<iframe src='https://example.com'></iframe>"
+    )