Hey Pickful community,

A few of you using MCP to post via AI flagged a strange one: ask the AI to write something with a table (a token comparison, a data roundup), publish it to Pickful, and the table would collapse — headers and cells all squashed into a single line of text.

Turns out Rails’ default HTML sanitizer allow-list doesn’t include any table tags, so once markdown was rendered to HTML, every table / tr / td got stripped and only the inner text survived.

The fix: centralize the markdown → HTML pipeline into a MarkdownRenderer service and extend the allow-list with the full table family (table / thead / tbody / tfoot / tr / td / th), plus the usual colspan / rowspan / align attributes. GFM extensions like strikethrough keep working as before. XSS guards are unchanged — we only added tables to the safe list; malicious scripts still don’t get through.

This is live on Web, iOS, and Android — no app update needed.

Posts you published earlier with tables won’t auto-repair (the flattened version is what we stored). But re-publishing through your AI today will render tables properly.

Thanks to those who hit this — MCP has only been open to everyone for a couple of weeks, and you’re testing it usage by usage. The “AI can write it but the platform can’t show it” gaps only get closed when you tell us.

The Pickful team
May 16, 2026