Sanitizer does not handle certain html string

[deepakageeru]

var sanitizer = new HtmlSanitizer(); var html = @"<<img>svg onload=alert(document.domain)>"; var sanitized = sanitizer.Sanitize(html, "http://www.example.com"); Console.WriteLine(sanitized); // returns "&lt;<img>svg onload=alert(document.domain)&gt;"

[mganss]

Looks fine to me at first glance. What output do you expect?