I am working on a project that requires some HTML sanitization. Normally, I would turn to the Microsoft Web Protection Library; however, in this case, I am developing an application running in minimal trust. Part of the WPL requires medium trust, and the rest seems to require full trust.
Can anyone suggest a good HTML sanitizer that can operate in a minimal trust environment?
Jeff Atwood’s sanitizer is here
And a C# Sanitizer that works better based on my limited testing is here
I took the c# and converted to vbnet and am using it a project now and it seems to catch html and javascript i dont want getting through.