OWASP AntiSamy v1.2.0

• Improved code documentation regarding methods for testing policies.
• Fix bug regarding noscript when preserving comments in the policy.
• Updated paragraph regex in example policies.
• Changed project to exclude the example policies from being added to the NuGet package (#11).
• Changed target frameworks to include only the ones covered by .NET Standard 2.0.

OWASP AntiSamy v1.1.1

• Fix dependency problem regarding AngleSharp.Css reference to AngleSharp.
• Removed deprecated directives omitXmlDeclaration and useXHTML.
• Small fixes regarding style processing.

From v1.1.0 which was not released on GitHub:

• Improve default policy.
• Added style sheet import capability when parsing CSS, with customizable import amount and connection timeouts.
• Added .NET 6 support.
• Improve support for onUnknownTag directive.
• Add noopenerAndNoreferrerAnchors directive support.

OWASP AntiSamy v1.0.3

• Improve regular expressions for some attributes.
• Add supports for dynamic attributes like data-* in HTML5.
• Update project dependencies.

OWASP AntiSamy v1.0.2

This release comes with improvements related to localization and default policies deployment.

• Updated localization handling and resources: Language selection is now more inclusive as it takes the parent culture, meaning that for example, "en-US" will use "en" instead of failing.
• Automatic inclusion of default policies: Default policies are now included when installing the NuGet package. They will also be removed when uninstalling.
• Small refactors and improvements on the main project and tests.

OWASP AntiSamy v1.0.1

First release version of the adaption of OWASP AntiSamy's Java version and huge refactor from the old C# version.

Main features:

• DOM scanner based on HtmlAgilityPack and AngleSharp.
• Customizable XML scan policies (with XML schema validation) that can be input as:
  • Raw string.
  • Stream object.
  • FileInfo object.
  • StreamReader object.
• Filtering with rules/actions to:
  • Remove tags.
  • Filter tags (remove but leave children tags).
  • Truncate tags (remove atributes and children tags).
  • Encode tags (HTML-encode the tag and move the children tags one level up).
  • Validate HTML attributes.
• JavaScript and CSS cleansing, from tags and attributes content.