ASP.NET中过滤HTML字符串的两个方法

文章分类:.net编程
先记下来，以作备用！

///   <summary>去除HTML标记  
///         
///   </summary>     
///   <param name="Htmlstring">包括HTML的源码< /param>     
///   <returns>已经去除后的文字</returns>     
public static string GetNoHTMLString(string Htmlstring)  
{  
    //删除脚本     
    Htmlstring = Regex.Replace(Htmlstring, @"<script[^>]*?>.*?</script>", "", RegexOptions.IgnoreCase);  
    //删除HTML     
    Htmlstring = Regex.Replace(Htmlstring, @"<(.[^>]*)>", "", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"([\r\n])[\s]+", "", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"-->", "", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"<!--.*", "", RegexOptions.IgnoreCase);  


    Htmlstring = Regex.Replace(Htmlstring, @"&(quot|#34);", "\"", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(amp|#3   );", "&", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(lt|#   0);", "<", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(gt|#   2);", ">", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(nbsp|#1   0);", "   ", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(iexcl|#1   1);", "\xa1", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(cent|#1   2);", "\xa2", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(pound|#1   3);", "\xa3", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&(copy|#1   9);", "\xa9", RegexOptions.IgnoreCase);  
    Htmlstring = Regex.Replace(Htmlstring, @"&#(\d+);", "", RegexOptions.IgnoreCase);  


    Htmlstring.Replace("<", "");  
     Htmlstring.Replace(">", "");  
     Htmlstring.Replace("\r\n", "");  
     Htmlstring = HttpContext.Current.Server.HtmlEncode(Htmlstring).Trim();  


     return Htmlstring;  
 }  


 /// <summary>获取显示的字符串，可显示HTML标签，但把危险的HTML标签过滤，如 iframe,script等。  
 ///   
 /// </summary>  
 /// <param name="str">未处理的字符串</param>  
 /// <returns></returns>  
 public static string GetSafeHTMLString(string str)  
 {  
     str = Regex.Replace(str, @"<applet[^>]*?>.*?</applet>", "", RegexOptions.IgnoreCase);  
     str = Regex.Replace(str, @"<body[^>]*?>.*?</body>", "", RegexOptions.IgnoreCase);  
     str = Regex.Replace(str, @"<embed[^>]*?>.*?</embed>", "", RegexOptions.IgnoreCase);  
     str = Regex.Replace(str, @"<frame[^>]*?>.*?</frame>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<script[^>]*?>.*?</script>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<frameset[^>]*?>.*?</frameset>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<html[^>]*?>.*?</html>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<iframe[^>]*?>.*?</iframe>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<style[^>]*?>.*?</style>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<layer[^>]*?>.*?</layer>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<link[^>]*?>.*?</link>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<ilayer[^>]*?>.*?</ilayer>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<meta[^>]*?>.*?</meta>", "", RegexOptions.IgnoreCase);  
      str = Regex.Replace(str, @"<object[^>]*?>.*?</object>", "", RegexOptions.IgnoreCase);  
      return str;  
  }