title: why does MS anti xss library (v4) remove html 5 data attributes
body: <p>AntiXss library seems to strip out html 5 data attributes, does anyone know why?</p>
  
  <p>I need to retain this input:</p>
  
  <pre><code>&lt;label class='ui-templatefield' data-field-name='P_Address3' data-field-type='special' contenteditable='false'&gt;[P_Address3]&lt;/label&gt;
  </code></pre>
  
  <p>The main reason for using the anti xss library (v4.0) is to ensure unrecognized style attributes are not parsed, is this even possible?</p>
  
  <p>code:</p>
  
  <pre><code>var result = Sanitizer.GetSafeHtml(html);
  </code></pre>
  
  <p><strong>EDIT:</strong></p>
  
  <p>The input below would result in the entire style attributes removed</p>
  
  <p>Input:</p>
  
  <pre><code>var input = "&lt;p style=\"width:50px;height:10px;alert('evilman')\"/&gt; Not sure why is is null for some wierd reason!&lt;br&gt;&lt;p&gt;&lt;/p&gt;";
  </code></pre>
  
  <p>Output:</p>
  
  <pre><code>var input = "&lt;p style=\"\"/&gt; Not sure why is is null for some wierd reason!&lt;br&gt;&lt;p&gt;&lt;/p&gt;";
  </code></pre>
  
  <p>Which is fine, if anyone messes around with my code on client side, but I also need the data attribute tags to work!</p>