WreckedAvent / slimCat

slimCat F-Chat Client
Other
27 stars 17 forks source link

Emails in Notes/Profiles Generate HTML #423

Open eradis opened 7 years ago

eradis commented 7 years ago

Encountering profiles with an email address (or something resembling one) or in notes tends to result in strange output, eg:

<a class="__cf_email__" href="/cdn-cgi/l/email-protection" data-cfemail="2e4c4b424341405a494f4c5c474b426e57434f4742004d414300">[email protected]</a><script data-cfhash='f9e31' type="text/javascript">/* <![CDATA[ */!function(t,e,r,n,c,a,p){try{t=document.currentScript||function(){for(t=document.getElementsByTagName('script'),e=t.length;e--;)if(t[e].getAttribute('data-cfhash'))return t[e]}();if(t&&(c=t.previousSibling)){p=t.parentNode;if(a=c.getAttribute('data-cfemail')){for(e='',r='0x'+a.substr(0,2)|0,n=2;a.length-n;n+=2)e+='%'+('0'+('0x'+a.substr(n,2)^r).toString(16)).slice(-2);p.replaceChild(document.createTextNode(decodeURIComponent(e)),c)}p.removeChild(t)}}catch(u){}}()/* ]]> */</script>
WreckedAvent commented 7 years ago

This is weird ... they're using something to obfuscate e-mail addresses. But there's no reason to do that, because notes are private, and won't have bots doing e-mail farming.

Laleila commented 7 years ago

That's not an F-List, it's from Cloudflare. It's an automatic thing to protect the emails from bots as you said. https://support.cloudflare.com/hc/en-us/articles/200170016-What-is-Email-Address-Obfuscation-