public static string GetSafeHtml(string val) { if (string.IsNullOrEmpty(val)) { return string.Empty; } var v1 = Sanitizer.GetSafeHtmlFragment(val);//安全字符 var v2 = SanitizerCompatibleWithChineseCharacters(v1);//中文亂碼 //Regex objRegEx=new Regex("<([^>]+)( [^>]+)>");<(?!img|a|\a)([^>]+)( [^>]+)> Regex objRegEx = new Regex("<(?!img|a|\a|font)([^>]+)( [^>]+)>");//過濾HTML標籤屬性 Regex objRegEx2 = new Regex("<[^>^/]+></[^>]+>");//過濾空白HTML標籤 var v3 = objRegEx.Replace(v2, "<$1>"); var v4 = objRegEx2.Replace(v3, ""); return v4; }
PS: SanitizerCompatibleWithChineseCharacters 參見本博客.安全