al_email_protect 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45eeb1de42070ef099e8c97dac39d19b382a24176bb366cae134999a44a8f563
-  data.tar.gz: '08d20381439a1b9f8338fa52b62a784fa021b7a6a00823867379d01cec833631'
+  metadata.gz: eda48a119414b48f22f99423d978f6b4fbc0ffd48d8624825aaaa07b75349492
+  data.tar.gz: c604de4cc07165de773b748e2748a43e3350cba1d5c2051106702ef9578a7db5
 SHA512:
-  metadata.gz: f035867e44a23b79ea54a50e63fbb6370a284d469fdeb35eabd95daa8b78324c4ce072bd20d2a1f3d1fbd8626f8700636e79256bd3024de7fa1613c9c0d12c9e
-  data.tar.gz: cc611264e9d7fb0d5dcb0350b2cd93f50b38ae9bad99510715afb760b917b29bdabb880198e2a9291486d6f47b80353c1a6b4a3e93726f4146944cd0a25c566d
+  metadata.gz: 2d93ea976edc2dd4b057d2670c2ea46fe49714ee9aa820c337cd5db3ede3e0227ea5ed6edfa16720098ff938ec7be02a3609682ef8759e6be73a2485df4e8318
+  data.tar.gz: 0a660b1b7d1c21f2d1e0f58c5f4c999e7b06aa0ed38f0cf0e6c35b88a5daa2c371ec1e5ac921d3d01368ff87353d9c5e66ee886e8d045dcf169e34113fd30106

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 1.0.1 — 2026-08-03
+
+- Added `al_email_protect_html`, a filter that rewrites `mailto:` anchors inside already-rendered HTML. al-folio's social
+  links come from the third-party `jekyll-socials` gem, which owns the whole block and offers no hook to render the email
+  entry differently — capturing its output and rewriting it afterwards is the only interception point, and it works
+  regardless of which gem produced the markup. Percent-encoded targets (as `encode_email` produces) are decoded first,
+  visible address text is replaced so the plaintext does not survive, non-`mailto:` links and unusable addresses are left
+  untouched, and the filter is a pass-through when the feature is off.
+
 ## 1.0.0 — 2026-08-02
 
 - Initial release of `al_email_protect`, implementing the email obfuscation proposed in

data/lib/al_email_protect/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AlEmailProtect
-  VERSION = "1.0.0"
+  VERSION = "1.0.1"
 end

data/lib/al_email_protect.rb

@@ -148,12 +148,65 @@ module AlEmailProtect
   end
 
   # {{ cv.email | al_email_obfuscate }}
+  # Rewrites every `mailto:` anchor in a fragment of already-rendered HTML.
+  #
+  # This exists because the markup that needs protecting is frequently not ours.
+  # al-folio's social links come from the third-party `jekyll-socials` gem, which
+  # owns the whole block and emits `mailto:%s` for the email entry — there is no
+  # hook to render that one link differently. Capturing its output and rewriting
+  # it afterwards is the only interception point, and it works regardless of
+  # which gem produced the markup.
+  #
+  # Deliberately narrow: it matches an <a> whose href begins with `mailto:` and
+  # replaces the whole element. It does not attempt to parse HTML generally.
+  ANCHOR = %r{<a\b([^>]*?)href=(["'])mailto:([^"']+)\2([^>]*)>(.*?)</a>}im.freeze
+
+  # `mailto:` targets are commonly percent-encoded (jekyll-email-protect's
+  # `encode_email` does exactly that), so decode before splitting or the local
+  # and domain halves come out as escape sequences.
+  def decode_target(value)
+    CGI.unescape(value.to_s.split("?").first.to_s)
+  rescue StandardError
+    value.to_s
+  end
+
+  def rewrite_html(html)
+    html.to_s.gsub(ANCHOR) do
+      before = Regexp.last_match(1)
+      after = Regexp.last_match(4)
+      address = decode_target(Regexp.last_match(3))
+      label = Regexp.last_match(5)
+      parts = split_address(address)
+
+      # Leave anything that is not a usable address exactly as it was; a
+      # half-rewritten contact link is worse than an unprotected one.
+      next Regexp.last_match(0) unless parts
+
+      local, domain = parts
+      attributes = "#{before}#{after}".gsub(/\s+/, " ").strip
+      # The visible text often *is* the address. Replace it with the split
+      # rendering, or the plaintext survives in the markup and the rewrite
+      # achieves nothing.
+      inner = label.to_s.include?("@") ? "#{escape(local)}<span class=\"al-email-sep\"> [at] </span>#{domain_markup(domain)}" : label
+
+      %(<a href="#" class="al-email-protect #{attributes}" data-eu="#{escape(local)}" data-ed="#{escape(domain)}">#{inner}</a>)
+    end
+  end
+
   module Filters
     def al_email_obfuscate(value)
       return value.to_s unless AlEmailProtect.enabled?(@context.registers[:site])
 
       AlEmailProtect.obfuscate_text(value)
     end
+
+    # `{{ captured_html | al_email_protect_html }}` — a pass-through when the
+    # feature is off, so callers can pipe unconditionally.
+    def al_email_protect_html(value)
+      return value.to_s unless AlEmailProtect.enabled?(@context.registers[:site])
+
+      AlEmailProtect.rewrite_html(value)
+    end
   end
 end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: al_email_protect
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - al-folio maintainers
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-02 00:00:00.000000000 Z
+date: 2026-08-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jekyll