The new user experience aspects are largely constructed with markdown extensions.

There's nothing insecure about including JSON data for a chart/graph. It wouldn't support arbitrary JS (for heaven's sake :)

More here: https://news.ycombinator.com/item?id=25804869#25807379

(I'm the author :)