.NET HTML whitelisting (anti-xss/Cross Site Scripting)
问题 I've got the common situation where I've got user input that uses a subset of HTML (input with tinyMCE). I need to have some server-side protection against XSS attacks and am looking for a well-tested tool that people are using to do this. On the PHP side I'm seeing lots of libraries like HTMLPurifier that do the job, but I can't seem to find anything in .NET. I'm basically looking for a library to filter down to a whitelist of tags, attributes on those tags, and does the right thing with