HtmlSanitizer
by Michael Ganss
<PackageReference Include="HtmlSanitizer" Version="7.0.473" />
API Diff between 7.0.473 and 9.0.876
133 Additions 16 Removals
Ganss.XSS
-
public class FilterUrlEventArgs : EventArgs
- public string OriginalUrl { get; }
- public string SanitizedUrl { get; set; }
- public IElement Tag { get; }
- public FilterUrlEventArgs(IElement tag, string originalUrl, string sanitizedUrl = null)
-
public class HtmlFormatter : HtmlMarkupFormatter
- public static readonly HtmlFormatter Instance
- public HtmlFormatter()
-
public class HtmlSanitizer : IHtmlSanitizer
- public static readonly Regex DefaultDisallowedCssPropertyValue
- public static ISet<CssRuleType> DefaultAllowedAtRules { get; }
- public static ISet<string> DefaultAllowedAttributes { get; }
- public static ISet<string> DefaultAllowedClasses { get; }
- public static ISet<string> DefaultAllowedCssProperties { get; }
- public static ISet<string> DefaultAllowedSchemes { get; }
- public static ISet<string> DefaultAllowedTags { get; }
- public static Func<HtmlParser> DefaultHtmlParserFactory { get; set; }
- public static bool DefaultKeepChildNodes { get; set; }
- public static IMarkupFormatter DefaultOutputFormatter { get; set; }
- public static ISet<string> DefaultUriAttributes { get; }
- public bool AllowDataAttributes { get; set; }
- public ISet<CssRuleType> AllowedAtRules { get; }
- public ISet<string> AllowedAttributes { get; }
- public ISet<string> AllowedClasses { get; }
- public ISet<string> AllowedCssProperties { get; }
- public ISet<string> AllowedSchemes { get; }
- public ISet<string> AllowedTags { get; }
- public Regex DisallowCssPropertyValue { get; set; }
- public Func<HtmlParser> HtmlParserFactory { get; set; }
- public bool KeepChildNodes { get; set; }
- public IMarkupFormatter OutputFormatter { get; set; }
- public ISet<string> UriAttributes { get; }
- public event EventHandler<FilterUrlEventArgs> FilterUrl
- public event EventHandler<PostProcessDomEventArgs> PostProcessDom
- public event EventHandler<PostProcessNodeEventArgs> PostProcessNode
- public event EventHandler<RemovingAtRuleEventArgs> RemovingAtRule
- public event EventHandler<RemovingAttributeEventArgs> RemovingAttribute
- public event EventHandler<RemovingCommentEventArgs> RemovingComment
- public event EventHandler<RemovingCssClassEventArgs> RemovingCssClass
- public event EventHandler<RemovingStyleEventArgs> RemovingStyle
- public event EventHandler<RemovingTagEventArgs> RemovingTag
- public HtmlSanitizer(IEnumerable<string> allowedTags = null, IEnumerable<string> allowedSchemes = null, IEnumerable<string> allowedAttributes = null, IEnumerable<string> uriAttributes = null, IEnumerable<string> allowedCssProperties = null)
- protected static string DecodeCss(string css)
- protected Iri GetSafeIri(string url)
- protected virtual void OnFilteringUrl(FilterUrlEventArgs e)
- protected virtual void OnPostProcessDom(PostProcessDomEventArgs e)
- protected virtual void OnPostProcessNode(PostProcessNodeEventArgs e)
- protected virtual void OnRemovingAtRule(RemovingAtRuleEventArgs e)
- protected virtual void OnRemovingAttribute(RemovingAttributeEventArgs e)
- protected virtual void OnRemovingComment(RemovingCommentEventArgs e)
- protected virtual void OnRemovingCssClass(RemovingCssClassEventArgs e)
- protected virtual void OnRemovingStyle(RemovingStyleEventArgs e)
- protected virtual void OnRemovingTag(RemovingTagEventArgs e)
- public string Sanitize(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
- public string SanitizeDocument(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
- public string SanitizeDocument(Stream html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
- public IHtmlDocument SanitizeDom(string html, string baseUrl = "")
- public IHtmlDocument SanitizeDom(IHtmlDocument document, IHtmlElement context = null, string baseUrl = "")
- protected void SanitizeStyle(IElement element, string baseUrl)
- protected virtual string SanitizeUrl(IElement element, string url, string baseUrl)
-
public interface IHtmlSanitizer
- bool AllowDataAttributes { get; set; }
- ISet<CssRuleType> AllowedAtRules { get; }
- ISet<string> AllowedAttributes { get; }
- ISet<string> AllowedClasses { get; }
- ISet<string> AllowedCssProperties { get; }
- ISet<string> AllowedSchemes { get; }
- ISet<string> AllowedTags { get; }
- Regex DisallowCssPropertyValue { get; set; }
- Func<HtmlParser> HtmlParserFactory { get; set; }
- bool KeepChildNodes { get; set; }
- IMarkupFormatter OutputFormatter { get; set; }
- ISet<string> UriAttributes { get; }
- event EventHandler<PostProcessDomEventArgs> PostProcessDom
- event EventHandler<PostProcessNodeEventArgs> PostProcessNode
- event EventHandler<RemovingAtRuleEventArgs> RemovingAtRule
- event EventHandler<RemovingAttributeEventArgs> RemovingAttribute
- event EventHandler<RemovingCommentEventArgs> RemovingComment
- event EventHandler<RemovingCssClassEventArgs> RemovingCssClass
- event EventHandler<RemovingStyleEventArgs> RemovingStyle
- event EventHandler<RemovingTagEventArgs> RemovingTag
- string Sanitize(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
- string SanitizeDocument(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
- IHtmlDocument SanitizeDom(string html, string baseUrl = "")
- IHtmlDocument SanitizeDom(IHtmlDocument document, IHtmlElement context = null, string baseUrl = "")
-
public class Iri
- public bool IsAbsolute { get; }
- public string Scheme { get; }
- public string Value { get; }
- public Iri(string value, string scheme = null)
-
public class PostProcessDomEventArgs : EventArgs
- public IHtmlDocument Document { get; }
- public PostProcessDomEventArgs(IHtmlDocument document)
-
public class PostProcessNodeEventArgs : EventArgs
- public IHtmlDocument Document { get; }
- public INode Node { get; }
- public IList<INode> ReplacementNodes { get; }
- public PostProcessNodeEventArgs(IHtmlDocument document, INode node)
-
public enum RemoveReason
- ClassAttributeEmpty = 6
- NotAllowedAttribute = 1
- NotAllowedCssClass = 5
- NotAllowedStyle = 2
- NotAllowedTag = 0
- NotAllowedUrlValue = 3
- NotAllowedValue = 4
- StyleAttributeEmpty = 7
- public class RemovingAtRuleEventArgs : CancelEventArgs
-
public class RemovingAttributeEventArgs : CancelEventArgs
- public IAttr Attribute { get; }
- public RemoveReason Reason { get; }
- public IElement Tag { get; }
- public RemovingAttributeEventArgs(IElement tag, IAttr attribute, RemoveReason reason)
-
public class RemovingCommentEventArgs : CancelEventArgs
- public IComment Comment { get; }
- public RemovingCommentEventArgs(IComment comment)
-
public class RemovingCssClassEventArgs : CancelEventArgs
- public string CssClass { get; }
- public RemoveReason Reason { get; }
- public IElement Tag { get; }
- public RemovingCssClassEventArgs(IElement tag, string cssClass, RemoveReason reason)
-
public class RemovingStyleEventArgs : CancelEventArgs
- public RemoveReason Reason { get; }
- public ICssProperty Style { get; }
- public IElement Tag { get; }
- public RemovingStyleEventArgs(IElement tag, ICssProperty style, RemoveReason reason)
-
public class RemovingTagEventArgs : CancelEventArgs
- public RemoveReason Reason { get; }
- public IElement Tag { get; }
- public RemovingTagEventArgs(IElement tag, RemoveReason reason)
Ganss.Xss
-
public class FilterUrlEventArgs : EventArgs
-
public class HtmlFormatter : HtmlMarkupFormatter
-
public class HtmlSanitizer : IHtmlSanitizer
-
public static class HtmlSanitizerDefaults
-
public class HtmlSanitizerOptions
-
public interface IHtmlSanitizer
-
public class Iri
-
public class PostProcessDomEventArgs : EventArgs
-
public class PostProcessNodeEventArgs : EventArgs
-
public enum RemoveReason
-
public class RemovingAtRuleEventArgs : CancelEventArgs
-
public class RemovingAttributeEventArgs : CancelEventArgs
-
public class RemovingCommentEventArgs : CancelEventArgs
-
public class RemovingCssClassEventArgs : CancelEventArgs
-
public class RemovingStyleEventArgs : CancelEventArgs
-
public class RemovingTagEventArgs : CancelEventArgs