aboutsummaryrefslogtreecommitdiff
path: root/doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn
diff options
context:
space:
mode:
authorhttp://gmcmanus.myopenid.com/ <http://gmcmanus.myopenid.com/@web>2008-07-21 23:25:17 -0400
committerJoey Hess <joey@kitenet.net>2008-07-21 23:25:17 -0400
commit2e51d5c74da6f4dda8a1f96781811d0b4c6c83c5 (patch)
treeba31608856253505db32854a7c3ada912c525cc0 /doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn
parentc2a2f715087a4602876618fdec2fad073308a6d5 (diff)
downloadikiwiki-2e51d5c74da6f4dda8a1f96781811d0b4c6c83c5.tar
ikiwiki-2e51d5c74da6f4dda8a1f96781811d0b4c6c83c5.tar.gz
email obfuscation by Text::Markdown undone by HTML::Scrubber
Diffstat (limited to 'doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn')
-rw-r--r--doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn17
1 files changed, 17 insertions, 0 deletions
diff --git a/doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn b/doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn
new file mode 100644
index 000000000..17836abfe
--- /dev/null
+++ b/doc/bugs/htmlscrubber_undoes_email_obfuscation_by_Text::Markdown.mdwn
@@ -0,0 +1,17 @@
+From the source of [[usage]]:
+
+ <a href="mailto:joey@ikiwiki.info">&#x6A;&#111;&#101;&#x79;&#64;i&#107;&#105;w&#105;&#107;&#x69;&#46;&#105;n&#x66;&#x6F;</a>
+
+Text::Markdown obfuscates email addresses in the href= attribute and in the text.
+Apparently this can't be configured.
+
+HTML::Scrubber doesn't set `attr_encoded` for its HTML::Parser, so the href= attribtute is decoded.
+Currently it seems it doesn't set `attr_encoded` for good reason: so attributes can be sanitized easily,
+e.g. as in htmlscrubber with `$safe_url_regexp`.
+This apparently can't be configured either.
+
+So I can't see an obvious solution to this.
+Perhaps improvements to Text::Markdown or HTML::Scrubber can allow a fix.
+
+One question is: how useful is email obfuscation?
+Don't spammers use HTML parsers?