matrix-org / matrix-viewer

View the history of public and world readable Matrix rooms
https://archive.matrix.org
Apache License 2.0
74 stars 11 forks source link

CloudFlare email protection #250

Open bkil opened 1 year ago

bkil commented 1 year ago

Is it intentional that it obscures phrases that look like email addresses (visible when JavaScript is disabled)? Presumably also happening with Fediverse accounts, root prompts, etc.

.
💬 (k) Hello from xmpp:[email protected]
{
  "content": {
    "body": "💬 (k) Hello from xmpp:secuchart@conference.movim.eu",
    "format": "org.matrix.custom.html",
    "formatted_body": "💬 (<b>k</b>) Hello from xmpp:secuchart@conference.movim.eu",
    "msgtype": "m.text"
  },
  "origin_server_ts": 1681141556603,
  "room_id": "!sOLQNHloevPHIEWcYN:matrix.org",
  "sender": "@fikabot:matrix.org",
  "type": "m.room.message",
  "unsigned": {
    "age": 4338869075
  },
  "event_id": "$R1-F8XOD4IWi3aiOQEKxyj-Jtn2k05WPjwCqfwzyQ7Q",
  "user_id": "@fikabot:matrix.org",
  "age": 4338869075
}

archive matrix org_issues_250_Cloudflare_email_protected

MadLittleMods commented 1 year ago

This is unintended and I wasn't aware of this happening. It doesn't seem like a totally bad thing to have enabled though. I could really go either way on this one :thinking:

This appears to be "Email Address Obfuscation" from Cloudflare as you surmised.

For reference, when JavaScript is disabled the [email protected] text is linked to https://archive.matrix.org/cdn-cgi/l/email-protection which is served from Cloudflare with the following content. With JavaScript enabled, the content appears like normal.

Email Protection

You are unable to access this email address matrix.org

The website from which you got to this page is protected by Cloudflare. Email addresses on that page have been hidden in order to keep them from being accessed by malicious bots. You must enable Javascript in your browser in order to decode the e-mail address.

If you have a website and are interested in protecting it in a similar way, you can sign up for Cloudflare.