Ejemplo n.º 1
0
        /// <summary>
        /// 只有允许的标签才能出现
        /// </summary>
        /// <param name="srcString"></param>
        /// <param name="allowedTags">允许的tag,包括属性列表</param>
        /// <returns></returns>
        public static String Filter(String srcString, Dictionary <String, String> allowedTags)
        {
            if (srcString == null)
            {
                return(null);
            }

            String s = TagFilter.Clear(srcString, allowedTags, false);

            return(s);
        }
Ejemplo n.º 2
0
        /// <summary>
        /// 根据白名单,过滤掉不安全的字符
        /// </summary>
        /// <param name="srcString"></param>
        /// <returns></returns>
        public static String Filter(String srcString)
        {
            if (srcString == null)
            {
                return(null);
            }

            String s = TagFilter.Clear(srcString);

            return(s);
        }
Ejemplo n.º 3
0
        /// <summary>
        /// 只有允许的标签才能出现
        /// </summary>
        /// <param name="srcString"></param>
        /// <param name="allowedTags">用英文逗号或斜杠分隔;不区分大小写</param>
        /// <returns></returns>
        public static String Filter(String srcString, String allowedTags)
        {
            if (srcString == null)
            {
                return(null);
            }

            String s = TagFilter.Clear(srcString, allowedTags);

            return(s);
        }
Ejemplo n.º 4
0
        /// <summary>
        /// 前提:在不允许 script/iframe/frameset 标签的基础上,只有允许的标签才能出现
        /// </summary>
        /// <param name="srcString"></param>
        /// <param name="allowedTags">用英文逗号或斜杠分隔;不区分大小写</param>
        /// <returns></returns>
        public static String Filter(String srcString, String allowedTags)
        {
            if (srcString == null)
            {
                return(null);
            }

            String s = scriptReg.Replace(srcString, "");

            s = iframeReg.Replace(s, "");
            s = framesetReg.Replace(s, "");

            s = TagFilter.Clear(s, allowedTags);

            return(s);
        }