HtmlSanitizer by Michael Ganss

<PackageReference Include="HtmlSanitizer" Version="9.1.878-beta" />

---

API Diff between 9.1.878-beta and 5.0.404

153 Additions 14 Removals

Ganss.XSS

• public class FilterUrlEventArgs : EventArgs
• public class HtmlFormatter : HtmlMarkupFormatter
• public class HtmlSanitizer : IHtmlSanitizer
• public interface IHtmlSanitizer
• public class Iri
• public class PostProcessDomEventArgs : EventArgs
• public class PostProcessNodeEventArgs : EventArgs
• public enum RemoveReason
• public class RemovingAtRuleEventArgs : CancelEventArgs
• public class RemovingAttributeEventArgs : CancelEventArgs
• public class RemovingCommentEventArgs : CancelEventArgs
• public class RemovingCssClassEventArgs : CancelEventArgs
• public class RemovingStyleEventArgs : CancelEventArgs
• public class RemovingTagEventArgs : CancelEventArgs

Ganss.Xss

• public class FilterUrlEventArgs : EventArgs
  • public string OriginalUrl { get; }
  • public string SanitizedUrl { get; set; }
  • public IElement Tag { get; }
  • public FilterUrlEventArgs(IElement tag, string originalUrl, string sanitizedUrl = null)
• public class HtmlFormatter : HtmlMarkupFormatter
  • public static readonly HtmlFormatter Instance
  • public HtmlFormatter()
• public class HtmlSanitizer : IHtmlSanitizer
  • public static readonly Regex DefaultDisallowedCssPropertyValue
  • public static Func<HtmlParser> DefaultHtmlParserFactory { get; set; }
  • public static bool DefaultKeepChildNodes { get; set; }
  • public static IMarkupFormatter DefaultOutputFormatter { get; set; }
  • public static IStyleFormatter DefaultStyleFormatter { get; set; }
  • public bool AllowCssCustomProperties { get; set; }
  • public bool AllowDataAttributes { get; set; }
  • public ISet<CssRuleType> AllowedAtRules { get; }
  • public ISet<string> AllowedAttributes { get; }
  • public ISet<string> AllowedClasses { get; }
  • public ISet<string> AllowedCssProperties { get; }
  • public ISet<string> AllowedSchemes { get; }
  • public ISet<string> AllowedTags { get; }
  • public Regex DisallowCssPropertyValue { get; set; }
  • public Action<IComment> EncodeComment { get; set; }
  • public Action<IElement> EncodeLiteralTextElementContent { get; set; }
  • public Func<HtmlParser> HtmlParserFactory { get; set; }
  • public bool KeepChildNodes { get; set; }
  • public IMarkupFormatter OutputFormatter { get; set; }
  • public IStyleFormatter StyleFormatter { get; set; }
  • public ISet<string> UriAttributes { get; }
  • public event EventHandler<FilterUrlEventArgs> FilterUrl
  • public event EventHandler<PostProcessDomEventArgs> PostProcessDom
  • public event EventHandler<PostProcessNodeEventArgs> PostProcessNode
  • public event EventHandler<RemovingAtRuleEventArgs> RemovingAtRule
  • public event EventHandler<RemovingAttributeEventArgs> RemovingAttribute
  • public event EventHandler<RemovingCommentEventArgs> RemovingComment
  • public event EventHandler<RemovingCssClassEventArgs> RemovingCssClass
  • public event EventHandler<RemovingStyleEventArgs> RemovingStyle
  • public event EventHandler<RemovingTagEventArgs> RemovingTag
  • public HtmlSanitizer()
  • public HtmlSanitizer(HtmlSanitizerOptions options)
  • protected static string DecodeCss(string css)
  • protected Iri GetSafeIri(string url)
  • protected virtual bool IsAllowedCssProperty(string propertyName)
  • protected virtual void OnFilteringUrl(FilterUrlEventArgs e)
  • protected virtual void OnPostProcessDom(PostProcessDomEventArgs e)
  • protected virtual void OnPostProcessNode(PostProcessNodeEventArgs e)
  • protected virtual void OnRemovingAtRule(RemovingAtRuleEventArgs e)
  • protected virtual void OnRemovingAttribute(RemovingAttributeEventArgs e)
  • protected virtual void OnRemovingComment(RemovingCommentEventArgs e)
  • protected virtual void OnRemovingCssClass(RemovingCssClassEventArgs e)
  • protected virtual void OnRemovingStyle(RemovingStyleEventArgs e)
  • protected virtual void OnRemovingTag(RemovingTagEventArgs e)
  • public string Sanitize(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
  • public string SanitizeDocument(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
  • public string SanitizeDocument(Stream html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
  • public IHtmlDocument SanitizeDom(string html, string baseUrl = "")
  • public IHtmlDocument SanitizeDom(IHtmlDocument document, IHtmlElement context = null, string baseUrl = "")
  • protected void SanitizeStyle(IElement element, string baseUrl)
  • protected virtual string SanitizeUrl(IElement element, string url, string baseUrl)
• public static class HtmlSanitizerDefaults
  • public static ISet<CssRuleType> AllowedAtRules { get; }
  • public static ISet<string> AllowedAttributes { get; }
  • public static ISet<string> AllowedClasses { get; }
  • public static ISet<string> AllowedCssProperties { get; }
  • public static ISet<string> AllowedSchemes { get; }
  • public static ISet<string> AllowedTags { get; }
  • public static ISet<string> UriAttributes { get; }
• public class HtmlSanitizerOptions
  • public bool AllowCssCustomProperties { get; set; }
  • public bool AllowDataAttributes { get; set; }
  • public ISet<CssRuleType> AllowedAtRules { get; set; }
  • public ISet<string> AllowedAttributes { get; set; }
  • public ISet<string> AllowedCssClasses { get; set; }
  • public ISet<string> AllowedCssProperties { get; set; }
  • public ISet<string> AllowedSchemes { get; set; }
  • public ISet<string> AllowedTags { get; set; }
  • public ISet<string> UriAttributes { get; set; }
  • public HtmlSanitizerOptions()
• public interface IHtmlSanitizer
  • bool AllowDataAttributes { get; set; }
  • ISet<CssRuleType> AllowedAtRules { get; }
  • ISet<string> AllowedAttributes { get; }
  • ISet<string> AllowedClasses { get; }
  • ISet<string> AllowedCssProperties { get; }
  • ISet<string> AllowedSchemes { get; }
  • ISet<string> AllowedTags { get; }
  • Regex DisallowCssPropertyValue { get; set; }
  • Func<HtmlParser> HtmlParserFactory { get; set; }
  • bool KeepChildNodes { get; set; }
  • IMarkupFormatter OutputFormatter { get; set; }
  • ISet<string> UriAttributes { get; }
  • event EventHandler<FilterUrlEventArgs> FilterUrl
  • event EventHandler<PostProcessDomEventArgs> PostProcessDom
  • event EventHandler<PostProcessNodeEventArgs> PostProcessNode
  • event EventHandler<RemovingAtRuleEventArgs> RemovingAtRule
  • event EventHandler<RemovingAttributeEventArgs> RemovingAttribute
  • event EventHandler<RemovingCommentEventArgs> RemovingComment
  • event EventHandler<RemovingCssClassEventArgs> RemovingCssClass
  • event EventHandler<RemovingStyleEventArgs> RemovingStyle
  • event EventHandler<RemovingTagEventArgs> RemovingTag
  • string Sanitize(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
  • string SanitizeDocument(string html, string baseUrl = "", IMarkupFormatter outputFormatter = null)
  • IHtmlDocument SanitizeDom(string html, string baseUrl = "")
  • IHtmlDocument SanitizeDom(IHtmlDocument document, IHtmlElement context = null, string baseUrl = "")
• public class Iri
  • public bool IsAbsolute { get; }
  • public string Scheme { get; }
  • public string Value { get; }
  • public Iri(string value, string scheme = null)
• public class PostProcessDomEventArgs : EventArgs
  • public IHtmlDocument Document { get; }
  • public PostProcessDomEventArgs(IHtmlDocument document)
• public class PostProcessNodeEventArgs : EventArgs
  • public IHtmlDocument Document { get; }
  • public INode Node { get; }
  • public ICollection<INode> ReplacementNodes { get; }
  • public PostProcessNodeEventArgs(IHtmlDocument document, INode node)
• public enum RemoveReason
  • ClassAttributeEmpty = 6
  • NotAllowedAttribute = 1
  • NotAllowedCssClass = 5
  • NotAllowedStyle = 2
  • NotAllowedTag = 0
  • NotAllowedUrlValue = 3
  • NotAllowedValue = 4
  • StyleAttributeEmpty = 7
• public class RemovingAtRuleEventArgs : CancelEventArgs
  • public ICssRule Rule { get; }
  • public IElement Tag { get; }
  • public RemovingAtRuleEventArgs(IElement tag, ICssRule rule)
• public class RemovingAttributeEventArgs : CancelEventArgs
  • public IAttr Attribute { get; }
  • public RemoveReason Reason { get; }
  • public IElement Tag { get; }
  • public RemovingAttributeEventArgs(IElement tag, IAttr attribute, RemoveReason reason)
• public class RemovingCommentEventArgs : CancelEventArgs
  • public IComment Comment { get; }
  • public RemovingCommentEventArgs(IComment comment)
• public class RemovingCssClassEventArgs : CancelEventArgs
  • public string CssClass { get; }
  • public RemoveReason Reason { get; }
  • public IElement Tag { get; }
  • public RemovingCssClassEventArgs(IElement tag, string cssClass, RemoveReason reason)
• public class RemovingStyleEventArgs : CancelEventArgs
  • public RemoveReason Reason { get; }
  • public ICssProperty Style { get; }
  • public IElement Tag { get; }
  • public RemovingStyleEventArgs(IElement tag, ICssProperty style, RemoveReason reason)
• public class RemovingTagEventArgs : CancelEventArgs
  • public RemoveReason Reason { get; }
  • public IElement Tag { get; }
  • public RemovingTagEventArgs(IElement tag, RemoveReason reason)