Add HtmlSanitizerOptions

src/HtmlSanitizer/HtmlSanitizer.cs

@@ -66,6 +66,21 @@ public class HtmlSanitizer : IHtmlSanitizer
 
         private static readonly HtmlParser defaultHtmlParser = new(new HtmlParserOptions(), BrowsingContext.New(defaultConfiguration));
 
+        /// <summary>
+        /// Initializes a new instance of the <see cref="HtmlSanitizer"/> class.
+        /// </summary>
+        /// <param name="options">Options to control the sanitizing.</param>
+        public HtmlSanitizer(HtmlSanitizerOptions options)
+        {
+            AllowedTags = options.AllowedTags;
+            AllowedSchemes = options.AllowedSchemes;
+            AllowedAttributes = options.AllowedAttributes;
+            UriAttributes = options.UriAttributes;
+            AllowedClasses = options.AllowedCssClasses;
+            AllowedCssProperties = options.AllowedCssProperties;
+            AllowedAtRules = options.AllowedAtRules;
+        }
+
         /// <summary>
         /// Initializes a new instance of the <see cref="HtmlSanitizer"/> class.
         /// </summary>

src/HtmlSanitizer/HtmlSanitizerOptions.cs

@@ -0,0 +1,47 @@
+using AngleSharp.Css.Dom;
+using System;
+using System.Collections.Generic;
+
+namespace Ganss.XSS
+{
+    /// <summary>
+    /// Provides options to be used with <see cref="HtmlSanitizer"/>.
+    /// </summary>
+    public class HtmlSanitizerOptions
+    {
+        /// <summary>
+        /// Gets or sets the allowed tag names such as "a" and "div".
+        /// </summary>
+        public ISet<string> AllowedTags { get; set; } = new HashSet<string>();
+
+        /// <summary>
+        /// Gets or sets the allowed HTML attributes such as "href" and "alt".
+        /// </summary>
+        public ISet<string> AllowedAttributes { get; set; } = new HashSet<string>();
+
+        /// <summary>
+        /// Gets or sets the allowed CSS classes.
+        /// </summary>
+        public ISet<string> AllowedCssClasses { get; set; } = new HashSet<string>();
+
+        /// <summary>
+        /// Gets or sets the allowed CSS properties such as "font" and "margin".
+        /// </summary>
+        public ISet<string> AllowedCssProperties { get; set; } = new HashSet<string>();
+
+        /// <summary>
+        /// Gets or sets the allowed CSS at-rules such as "@media" and "@font-face".
+        /// </summary>
+        public ISet<CssRuleType> AllowedAtRules { get; set; } = new HashSet<CssRuleType>();
+
+        /// <summary>
+        /// Gets or sets the allowed URI schemes such as "http" and "https".
+        /// </summary>
+        public ISet<string> AllowedSchemes { get; set; } = new HashSet<string>();
+
+        /// <summary>
+        /// Gets or sets the HTML attributes that can contain a URI such as "href".
+        /// </summary>
+        public ISet<string> UriAttributes { get; set; } = new HashSet<string>();
+    }
+}