Skip to main content

Gracefully email obfuscation for Plone

Project description


GEO stands for “Gracefully E-mail Obfuscation”. This package implements the solution exposed in this post of List Apart web site authored by Roel Van Gils:

collective.geotransform uses plone.transformchain to transform the response output from Zope before it reaches your browser. It searches for all “mailto:” occurences inside the response and transform them into encoded harmless links. It also searches for plain email addresses (without links) inside the response and transform them into encrypted spans. This codification is done via a simple base64 encoding, but enough to fool a spam robot.

This is the form of the encoded mailto link:

<a rel=”nofollow” href=”geomailto:dmljdG9yLmZlcm5hbmRlejJAdXBjbmV0LmVz”>Link text</a>

While this is the form of the encoded span for plain email address:

<span class=”geomailaddress”>dmljdG9yLmZlcm5hbmRlejJAdXBjbmV0LmVz</span>

On the browser side, the encoded links and spans are decoded to their original form by using a Javascript that restores them to normal “mailto:” links and decrypted plain text emails.

Authenticated responses are NOT affected by this transform. Only anonymous responses are modified.


Tested only in Plone 4 although is possible that it would run in Plone 3.


  • Accessibility form and validators


1.0.3 (2017-12-06)

  • Do not obfuscate mails inside textarea or value=”” attribute (#15) [laulaz]

1.0.2 (2016-08-19)

  • Do not obfuscate mails when called from Ajax, because we don’t know if they will be de-obfuscated and that the goal is to fool non-Javascript robots [laulaz]

1.0.1 (2015-02-03)

  • Add metadata.xml into profile. [bsuttor]
  • Decode utf8 if accent in mail [bsuttor]
  • Add upgradestep for import new metadata.xml [bsuttor]

1.0 (2014-10-22)

  • Obfuscate plain text mails (#8) [laulaz]
  • Avoid touching mailto tags content (#4) [laulaz]
  • Avoid trying to transform non-HTML requests [laulaz]
  • Handle links with subject and / or body (#1) [laulaz]
  • Fix check for anonymous (#2) and for portal url (#3) [laulaz]
  • Fix getSite location [laulaz]
  • Add tests [laulaz]
  • Add buildout and bootstrap [laulaz]

1.0a3 (2012-08-03)

  • Fix check for anonymous [pbauer]

1.0a2 (2010-11-24)

  • Fixed broken uploaded file to pypi

1.0a1 (2010-10-22)

  • Initial release

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Filename, size & hash SHA256 hash help File type Python version Upload date
collective.geotransform-1.0.3.tar.gz (57.2 kB) Copy SHA256 hash SHA256 Source None Dec 6, 2017

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page