Ticket #4340: 4340.patch

_source/plugins/link/plugin.js

@@ -122 +122 @@
 
         afterInit : function( editor )
         {
+
+                var protectFuncRegex = /^([^(]+)\(([^)]+)\)$/,
+                        functionInfo = {};
+
+                editor.config.mailProtection.replace( protectFuncRegex, function( match, funcName, params )
+                {
+                        functionInfo.name = funcName;
+                        functionInfo.params = [];
+                        params.replace( /[^,]+/g, function( param )
+                        {
+                                functionInfo.params.push( param );
+                        } );
+                } );
+
+                function stringCodes( str )
+                {
+                        var char,
+                                charCode,
+                                result = [];
+                        for ( var i = 0; i < str.length; i++ )
+                        {
+                                charCode = str.charCodeAt( i );
+                                result.push( charCode );
+                        }
+                        return result;
+                }
+
                 // Register a filter to displaying placeholders after mode change.
 
                 var dataProcessor = editor.dataProcessor,
-                        dataFilter = dataProcessor && dataProcessor.dataFilter;
+                        dataFilter = dataProcessor && dataProcessor.dataFilter,
+                        htmlFilter = dataProcessor && dataProcessor.htmlFilter;
 
                 if ( dataFilter )
                 {
@@ -141 +169 @@
                                                 }
                                         }
                                 });
-                }
+
+                        dataFilter.addRules(
+                        {
+                                elements :
+                                {
+                                        a : function( element )
+                                        {
+                                                var mailProtection = editor.config.mailProtection,
+                                                        encodeProtection = mailProtection == 'encode',
+                                                        protectFunction = !encodeProtection,
+                                                        href = element.attributes.href,
+                                                        unProtectedHref;
+
+                                                if( protectFunction )
+                                                {
+                                                        href.replace( /^javascript:([^(]+)\(([^)]+)\)$/, function( match, funcName, args )
+                                                        {
+                                                                if( funcName == functionInfo.name )
+                                                                {
+                                                                        var mailInSequence = [],
+                                                                                priority = { name : -2, domain: -1 },
+                                                                                index = 0,
+                                                                                paramName;
+                                                                        unProtectedHref = [ 'mailto:' ];
+                                                                        args.replace( /[^,]+/g, function( param )
+                                                                        {
+                                                                                param = param.replace( /(^')|('$)/g, '' ).replace( /\\'/g, '\'' );
+                                                                                paramName = functionInfo.params[ index ];
+                                                                                paramName = paramName && paramName.toLowerCase();
+                                                                                paramName && mailInSequence.push( [ paramName, param ] );
+                                                                                index++;
+                                                                        } );
+
+                                                                        mailInSequence.sort( function( a, b )
+                                                                        {
+                                                                                return ( priority[ a [ 0 ] ] || a [ 0 ].charCodeAt( 0 ) )
+                                                                                                > ( priority[ b [ 0 ] ] || b [ 0 ].charCodeAt( 0 ) );
+                                                                        } );
+
+                                                                        for ( var i = 0; i < mailInSequence.length; i++ )
+                                                                        {
+                                                                                if( i < 2 )
+                                                                                {
+                                                                                        if( i == 1 )
+                                                                                                unProtectedHref.push( '@' );
+                                                                                        unProtectedHref.push( mailInSequence[ i ][ 1 ] );
+                                                                                }
+                                                                                else
+                                                                                {
+                                                                                        if( i == 2 )
+                                                                                                unProtectedHref.push( '?' );
+                                                                                        else
+                                                                                                unProtectedHref.push( '&' );
+                                                                                        unProtectedHref.push( mailInSequence[ i ][ 0 ], '=', mailInSequence[ i ][ 1 ] );
+                                                                                }
+                                                                        }
+
+                                                                        unProtectedHref = unProtectedHref.join( '' );
+                                                                }
+                                                        } );
+                                                }
+                                                else if( encodeProtection )
+                                                {
+                                                        href.replace( /^javascript:void\(location\.href='mailto:'\+String\.fromCharCode\(([^)]+)\)\+'(.*)'\)$/,
+                                                                        function ( match, mailAddressCharCodes, rest )
+                                                                {
+                                                                        unProtectedHref = 'mailto:'
+                                                                                        + String.fromCharCode.apply( String, mailAddressCharCodes.split( ',' ) )
+                                                                                        + rest;
+                                                                } );
+                                                }
+
+                                                unProtectedHref &&
+                                                        ( element.attributes[ '_cke_saved_href' ] = element.attributes.href = unProtectedHref );
+                                        }
+                                }
+                        } );
+
+                        htmlFilter.addRules(
+                        {
+                                elements :
+                                {
+                                        a : function( element )
+                                        {
+                                                var mailProtection = editor.config.mailProtection,
+                                                        encodeProtection = mailProtection == 'encode',
+                                                        protectFunction = !encodeProtection && editor.config.mailProtection,
+                                                        emailInfo = {},
+                                                        emailSequence = [],
+                                                        href = element.attributes[ '_cke_saved_href' ],
+                                                        protectedHref;
+
+                                                href.replace( /&amp;/, '&')
+                                                        .replace( /^mailto:([^?]+)@([^?]+)(.*)$/,
+                                                                function ( match, name, domain, rest )
+                                                                {
+                                                                        if ( protectFunction )
+                                                                        {
+                                                                                emailInfo[ 'name' ] = name;
+                                                                                emailInfo[ 'domain' ] = domain;
+                                                                        }
+                                                                        else
+                                                                                emailSequence.push( name, domain );
+
+                                                                        rest.replace( /([^?&]+)=([^?&]+)/g,
+                                                                                        function ( match, name, value )
+                                                                                        {
+                                                                                                if( protectFunction )
+                                                                                                    emailInfo[ name ] = value;
+                                                                                                else
+                                                                                                        emailSequence.push( match );
+                                                                                        } );
+                                                                } );
+
+                                                if( protectFunction && !CKEDITOR.tools.isEmpty( emailInfo ) )
+                                                {
+                                                        var name = functionInfo.name,
+                                                                params = functionInfo.params,
+                                                                paramName;
+
+                                                        protectedHref = [ 'javascript:', name, '(' ];
+
+                                                        for ( var i = 0; i < params.length; i++ )
+                                                        {
+                                                                paramName = params[ i ].toLowerCase();
+
+                                                                if ( emailInfo[ paramName ] )
+                                                                {
+                                                                        i > 0 && protectedHref.push( ',' );
+                                                                        protectedHref.push('\'', emailInfo[ paramName ].replace( /'/g, '\\$&' ), '\'');
+                                                                }
+                                                        }
+                                                        protectedHref.push( ')' );
+                                                }
+                                                else if( encodeProtection && emailSequence.length )
+                                                {
+                                                        protectedHref = ['javascript:void(location.href=\'mailto:\'+'];
+                                                        for ( i = 0; i < emailSequence.length; i++ )
+                                                        {
+                                                                if( i == 1 )
+                                                                {
+                                                                        protectedHref.push( 'String.fromCharCode(',
+                                                                                        stringCodes( emailSequence[ 0 ] + '@' + emailSequence[ 1 ] ).join( ',' ),
+                                                                                        ')' );
+                                                                }
+                                                                else if( i > 1 )
+                                                                        protectedHref.push( i == 2 ? '+\'?' : '&', emailSequence[ i ] );
+                                                        }
+
+                                                        protectedHref.push( '\')' );
+                                                }
+
+                                                protectedHref && ( element.attributes[ '_cke_saved_href' ] = protectedHref.join( '' ) );
+                                        }
+                                }
+                        } );
+                }
         },
 
         requires : [ 'fakeobjects' ]

_source/core/config.js

@@ -282 +282 @@
          * @example
          * config.baseFloatZIndex = 2000
          */
-        baseFloatZIndex : 10000
+        baseFloatZIndex : 10000,
 
+        /**
+         * The e-mail address anti-spam protection option.
+         * @type String
+         * Two forms of protection could be choosed from :
+         * 1. The whole address parts ( name, domain with any other query string ) are assembled into a
+         *   function call pattern which invoke you own provided function, with the specified arguments.
+         * 2. Only the e-mail address is obfuscated into their corresponding ASC2 values, replacement are
+         *   done by a String.fromCharCode() call.
+         * Note: Both approaches require JavaScript to be enabled.
+         * @default false
+         * @example
+         * config.mailProtection = '';
+         * // href="mailto:tester@ckeditor.com?subject=subject&body=body"
+         * config.mailProtection = 'encode';
+         * // href="<a href=\"javascript:void(location.href=\'mailto:\'+String.fromCharCode(116,101,115,116,101,114,64,99,107,101,100,105,116,111,114,46,99,111,109)+\'?subject=subject&body=body\')\">e-mail</a>"
+         * config.mailProtection = 'mt(NAME,DOMAIN,SUBJECT,BODY)';
+         * // href="javascript:mt('tester','ckeditor.com','subject','body')"
+         */
+        mailProtection : ''
 };
 
 // PACKAGER_RENAME( CKEDITOR.config )