Project

General

Profile

Actions

Feature #90044

closed

Remove spamProtectEmailAddresses with option "ascii"

Added by Tizian Schmidlin almost 5 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2020-01-02
Due date:
% Done:

100%

Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

The spamProtectEmailAddresses "ascii" intends to fool crawler bots to misinterpret an email and therefore "protect" the e-mail adress.

In my opinion this does not work anymore, since someone could easily add a rule to an email crawler to check if the part after the mailto: contains @ and if it does not it could simply try to htmlentities_decode and get the value out this way.

Therefore the SPAM protection of the ascii option is as good as simply putting the email adress out there without any encryption.

I suggest therefore to deprecate this option for TYPO3 10.x and remove it with TYPO3 11. In order to make migration easier, the ascii value could be replaced by something that is known to be safe, like -5.


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #89910: spamProtectEmailAddresses doesn't work as expected with value "ascii" Closed2019-12-10

Actions
Related to TYPO3 Core - Task #100996: Remove deprecated TypoScript settingsClosedBenni Mack2023-06-12

Actions
Actions

Also available in: Atom PDF