Pastable version of Sanitize HTML

<div style="overflow:auto;border:solid 1px #ccc;background:#000;color:#F8F8F8">
 <div class="section">
 
 <pre style="float:left;margin:0 10px;border-right:0;color:#666;">1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51</pre>
 <pre class="sunburst">private static Regex _tags = new Regex(&quot;&lt;[^&gt;]*(&gt;|$)&quot;,
 RegexOptions.Singleline | RegexOptions.ExplicitCapture | RegexOptions.Compiled);
private static Regex _whitelist = new Regex(@&quot;
 ^&lt;/?(b(lockquote)?|code|d(d|t|l|el)|em|h(1|2|3)|i|kbd|li|ol|p(re)?|s(ub|up|trong|trike)?|ul)&gt;$|
 ^&lt;(b|h)r\s?/?&gt;$&quot;,
 RegexOptions.Singleline | RegexOptions.ExplicitCapture | RegexOptions.Compiled | RegexOptions.IgnorePatternWhitespace);
private static Regex _whitelist_a = new Regex(@&quot;
 ^&lt;a\s
 href=&quot;&quot;(\#\d+|(https?|ftp)://[-a-z0-9+&amp;@#/%?=~_|!:,.;$$]+)&quot;&quot;
 (\stitle=&quot;&quot;[^&quot;&quot;&lt;&gt;]+&quot;&quot;)?\s?&gt;$|
 ^&lt;/a&gt;$&quot;,
 RegexOptions.Singleline | RegexOptions.ExplicitCapture | RegexOptions.Compiled | RegexOptions.IgnorePatternWhitespace);
private static Regex _whitelist_img = new Regex(@&quot;
 ^&lt;img\s
 src=&quot;&quot;https?://[-a-z0-9+&amp;@#/%?=~_|!:,.;$$]+&quot;&quot;
 (\swidth=&quot;&quot;\d{1,3}&quot;&quot;)?
 (\sheight=&quot;&quot;\d{1,3}&quot;&quot;)?
 (\salt=&quot;&quot;[^&quot;&quot;&lt;&gt;]*&quot;&quot;)?
 (\stitle=&quot;&quot;[^&quot;&quot;&lt;&gt;]*&quot;&quot;)?
 \s?/?&gt;$&quot;,
 RegexOptions.Singleline | RegexOptions.ExplicitCapture | RegexOptions.Compiled | RegexOptions.IgnorePatternWhitespace);

/// &lt;summary&gt;
/// sanitize any potentially dangerous tags from the provided raw HTML input using 
/// a whitelist based approach, leaving the &quot;safe&quot; HTML tags
/// CODESNIPPET:4100A61A-1711-4366-B0B0-144D1179A937
/// &lt;/summary&gt;
public static string Sanitize(string html)
{
 if (String.IsNullOrEmpty(html)) return html;

string tagname;
 Match tag;

// match every HTML tag in the input
 MatchCollection tags = _tags.Matches(html);
 for (int i = tags.Count - 1; i &gt; -1; i--)
 {
 tag = tags[i];
 tagname = tag.Value.ToLowerInvariant();
 
 if(!(_whitelist.IsMatch(tagname) || _whitelist_a.IsMatch(tagname) || _whitelist_img.IsMatch(tagname)))
 {
 html = html.Remove(tag.Index, tag.Length);
 System.Diagnostics.Debug.WriteLine(&quot;tag sanitized: &quot; + tagname);
 }
 }

return html;
}
</pre>
 </div>
 </div>

Refactor :my => 'code'

Recent

Popular

Pastable version of Sanitize HTML