Protecting your email address via SVG instead of JavaScript

#1

Post by FrostKiwi » Mon, May 13, 2024, 7:33 AM UTC

Protecting your email address via SVG instead of JavaScript
rouninmedia.github.io

Re: Protecting your email address via SVG instead of JavaScript

#2

Post by cwillu » Mon, May 13, 2024, 7:54 AM UTC

Email is still plain-text within an xml document referenced in the page source.

Re: Protecting your email address via SVG instead of JavaScript

#3

Post by throwaway11460 » Mon, May 13, 2024, 7:54 AM UTC

Don't have time to test myself right now - what about accessibility, can a screen reader read it?

Re: Protecting your email address via SVG instead of JavaScript

#4

Post by Operyl » Mon, May 13, 2024, 7:56 AM UTC

throwaway11460 wrote: post #3

Don't have time to test myself right now - what about accessibility, can a screen reader read it?

Given the entire bottom section, it seems like accessibility was taken into account here.

Re: Protecting your email address via SVG instead of JavaScript

#5

Post by throwaway11460 » Mon, May 13, 2024, 7:56 AM UTC

Operyl wrote: post #4

throwaway11460 wrote: post #3

Don't have time to test myself right now - what about accessibility, can a screen reader read it?

Given the entire bottom section, it seems like accessibility was taken into account here.

Unfortunately then I think it won't help at all - going through the accessibility tree is a standard web crawling play.

Re: Protecting your email address via SVG instead of JavaScript

#6

Post by SahAssar » Mon, May 13, 2024, 7:59 AM UTC

If concealing it in an object tag works then you could just have the object tag show it as plain text or html, right? Not sure why its an svg.

Re: Protecting your email address via SVG instead of JavaScript

#7

Post by okasaki » Mon, May 13, 2024, 7:59 AM UTC

Is it still necessary to obfuscate email addresses? Mine isn't and I get around 50 generic spam emails per month to gmail.

Re: Protecting your email address via SVG instead of JavaScript

#8

Post by fp64 » Mon, May 13, 2024, 8:02 AM UTC

I don't get it, I can just curl the svg and grep for mailto?

Re: Protecting your email address via SVG instead of JavaScript

#9

Post by magnat » Mon, May 13, 2024, 8:02 AM UTC

> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable

NoScript on Firefox with default settings don't render tags (replaces them with placeholders), so this technique doesn't work here.

https://imgur.com/2tCAgAf

Re: Protecting your email address via SVG instead of JavaScript

#10

Post by gostsamo » Mon, May 13, 2024, 8:03 AM UTC

throwaway11460 wrote: post #3

Don't have time to test myself right now - what about accessibility, can a screen reader read it?

I tested and seems accessible on the live demo. Not sure if is as protected as the author claims though, but it might throw some bots for a spin.