Html Agility Pack - Knowledge Base (KB)

How do you use the HTML Agility Pack to htmlencode?

Has anyone done this? Basically, I want to use the html by keeping basic tags such as h1, h2, em, etc; clean all non http addresses in the img and a tags; and HTMLEncode every other tag. ...I'm stuck at the HTML Encoding part. I know to remove a node y...

How I protect against XSS attacks in attributes such as src?

So I've been building a C# html sanitizer using html agility with a white list. It works fine, except for cases like these:...<img src="javascript:alert('BadStuff');" /> <img src="jav&#x09;ascript:alert('BadStuff');"> ...I DO want to allow the src attrib...