Fix #119

src/HtmlSanitizer/HtmlSanitizer.cs

@@ -468,7 +468,7 @@ namespace Ganss.XSS
             SanitizeStyleSheets(dom, baseUrl);
 
             // cleanup attributes
-            foreach (var tag in context.QuerySelectorAll("*").OfType<IHtmlElement>().ToList())
+            foreach (var tag in context.QuerySelectorAll("*").OfType<IElement>().ToList())
             {
                 // remove non-whitelisted attributes
                 foreach (var attribute in tag.Attributes.Where(a => !IsAllowedAttribute(a)).ToList())
@@ -633,7 +633,7 @@ namespace Ganss.XSS
         /// </summary>
         /// <param name="element">The element.</param>
         /// <param name="baseUrl">The base URL.</param>
-        protected void SanitizeStyle(IHtmlElement element, string baseUrl)
+        protected void SanitizeStyle(IElement element, string baseUrl)
         {
             // filter out invalid CSS declarations
             // see https://github.com/AngleSharp/AngleSharp/issues/101

test/HtmlSanitizer.Tests/Tests.cs

@@ -2953,6 +2953,21 @@ zqy1QY1kkPOuMvKWvvmFIwClI2393jVVcp91eda4+J+fIYDbfJa7RY5YcNrZhTuV//9k="">
 
             Assert.Equal(html, actual);
         }
+
+        [Fact]
+        public void SvgTest()
+        {
+            // https://github.com/mganss/HtmlSanitizer/issues/119
+
+            var sanitizer = new HtmlSanitizer();
+            sanitizer.AllowedTags.Add("svg");
+
+            var html = @"<svg onchange='alert(1)'>123</svg>";
+
+            var actual = sanitizer.Sanitize(html);
+
+            Assert.Equal("<svg>123</svg>", actual);
+        }
     }
 }