This article describes the method of ASP. NET Filter HTML string, for everyone to refer to the use, the specific code is as follows:
<summary> Remove HTML tags//////</summary>//<param name= "htmlstring" > include HTML source </param> <returns> removed text </returns> public static string getnohtmlstring (String htmlstring) {//delete script Htm lstring = Regex.Replace (htmlstring, @ "<script[^>]*?>.*?</script>", "", regexoptions.ignorecase); Delete html htmlstring = Regex.Replace (htmlstring, @ "< (. [ ^>]*) > "," ", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "([\ r \ n]) [\s]+", "", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "-and", "", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "<!--. *", "", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (quot| #34);", "\" ", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (amp| #38);", "&", Regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (lt| #60);", "<", Regexoptions.ignorecaSE); htmlstring = Regex.Replace (htmlstring, @ "& (gt| #62);", ">", Regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (nbsp| #160);", "", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (iexcl| #161);", "\xa1", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (cent| #162);", "\xa2", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (pound| #163);", "\xa3", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "& (copy| #169);", "\xa9", regexoptions.ignorecase); htmlstring = Regex.Replace (htmlstring, @ "(\d+);", "", regexoptions.ignorecase); Htmlstring.replace ("<", ""); Htmlstring.replace (">", ""); Htmlstring.replace ("\ r \ n", ""); htmlstring = HttpContext.Current.Server.HtmlEncode (htmlstring). Trim (); return htmlstring; }///<summary> Gets the displayed string, which displays HTML tags, but filters out dangerous HTML tags, such as iframe,script. </summary>//<param name= "str" > UnhandledString </param>///<returns></returns> public static string getsafehtmlstring (String str) {str = REGEX.R Eplace (str, @ "<applet[^>]*?>.*?</applet>", "", regexoptions.ignorecase); str = regex.replace (str, @ "<body[^>]*?>.*?</body>", "", regexoptions.ignorecase); str = regex.replace (str, @ "<embed[^>]*?>.*?</embed>", "", regexoptions.ignorecase); str = regex.replace (str, @ "<frame[^>]*?>.*?</frame>", "", regexoptions.ignorecase); str = regex.replace (str, @ "<script[^>]*?>.*?</script>", "", regexoptions.ignorecase); str = regex.replace (str, @ "<frameset[^>]*?>.*?</frameset>", "", regexoptions.ignorecase); str = regex.replace (str, @ "