src/ZKEACMS/Safety/DefaultHtmlSanitizer.cs

微信扫码关注公众号，代码整理好后第一时间通知你。

/* http://www.zkea.net/ 
 * Copyright (c) ZKEASOFT. All rights reserved. 
 * http://www.zkea.net/licenses */

using Easy.Extend;
using Ganss.XSS;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;

namespace ZKEACMS.Safety
{
    public class DefaultHtmlSanitizer : IHtmlSanitizer
    {
        private static HtmlSanitizer _sanitizer;
        static DefaultHtmlSanitizer()
        {
            _sanitizer = new HtmlSanitizer();
            _sanitizer.AllowedSchemes.Add("mailto");
            _sanitizer.AllowedAttributes.Add("class");
        }

        public string Sanitize(string html)
        {
            if (html.IsNullOrEmpty()) return html;

            return _sanitizer.Sanitize(html);
        }
    }
}