const input = `
# Marked in the browser
Rendered by **marked**.
1. Hello
1. World
1. End 3
`.trim();
const output = DOMPurify.sanitize(marked(input));
document.getElementById('content').innerHTML = output;
<div id="content"></div>
<script src="https://cdn.jsdelivr.net/npm/marked@2/marked.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/dompurify@2/dist/purify.min.js"></script>