HtmlSanitizer
HtmlSanitizer copied to clipboard
Cleans HTML to avoid XSS attacks
Rename namespace from `Ganss.XSS` to `Ganss.Xss` as per the [Microsoft .NET Framework Design Guidelines Capitalization Conventions](https://docs.microsoft.com/en-us/dotnet/standard/design-guidelines/capitalization-conventions).
Bumps [xunit.runner.console](https://github.com/xunit/xunit) from 2.4.1 to 2.4.2. Commits f110e5b v2.4.2 848d94d Update dependencies 42307e8 Fixes #2556: Xunit.Sdk.MultipleException Empty 7eba502 Port test changes from 1dd43ce684cc6d50bf726042173956e6bda2fa3b 211aa27 Make sure we use msbuild.exe (from...
Remove all legacy/deprecated tags such as `acronym`, `big`, `center`, `dir`, `keygen`, `menuitem` and `strike`. Remove non-semantic presentational HTML4 tags such as `b`, `i`, `u` and `tt`. Remove tags dealing with...
I wasn't sure if this is an issue with the sanitizer or with AngleSharp, but since I'm experiencing it via your library, I figured it would be better to open...
Hi. I added @counter-style in the allowed list of CSS at rules. But it is stripping off that. ``` @counter-style winners-list { system: fixed; symbols: url(gold-medal.svg) url(silver-medal.svg) url(bronze-medal.svg); suffix: "...
I have explored and have some open items that show wrong results (valid values are removed). Here is a short point-wise summary: 1. background-image: conical-gradient(color,color,color) ``` #grad { background-image: conic-gradient(red,...
Here is a code snippet: ``` div{margin:24px} p{margin: inherit} ``` should return the same value. But the sanitized output is ``` div { margin: 24px } p { } ```...
I want to preserve comments written in style tags also but I am not able to preserve them even though I am using RemovingComments event hook and canceling the event....
I'm using SVG icons in application, but sanitizer removes it. Tried to allow `svg` tag, but it is not working. All svg nested tags are removed. ```c# sanitizer.AllowedTags.Add("svg") ``` How...
Hey! Can anyone explain me how to sanitize Null Byte payloads ? Ex: "> This example is not being sanitized.