<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
For action=edit<br>
is it possible for a script (cf the edit scripts) to unmunge the email
address on the client once it is in the textarea?<br>
<br>
For action=source<br>
I'd suggest either disabling it, <br>
or munging it as it is generated<br>
eg <a class="moz-txt-link-freetext" href="mailto:foo.bar@foobar.com">mailto:foo.bar@foobar.com</a>
to mail to foo (dot) bar (at) foorbar (dot)
com<br>
<br>
Patrick R. Michaud wrote:
<blockquote cite="mid20050508011247.GA6373@pmichaud.com" type="cite">
<pre wrap="">On Sun, May 08, 2005 at 12:10:02PM +1200, Simon wrote:
</pre>
<blockquote type="cite">
<pre wrap="">The best way to protect email addresses properly is to only build them
on the client side using a script.
(email harvesters are unlikely to go to effort of interpreting a javascript)
For a trivial eProtect I'd like to have
* PmWiki generate a call to a javascript routine for every mailto link it
generates
[...]
* I don't want to see them munged in the wiki.d files, and simply
changing them to character entities may help, but is really trivial to
overcome and provides no protection!
</pre>
</blockquote>
<pre wrap=""><!---->
If you don't munge the addresses in the wiki.d/ files, then address
harvesters can grab the cleartext addresses via ?action=edit or
?action=source (unless you have those password protected somehow).
Or, you have to be sure to munge them when displaying those forms,
which basically amounts to same thing as munging them in the wiki.d/
files.
Pm
</pre>
</blockquote>
</body>
</html>