plugin.json

{
    "name": "Email Address Obfuscation Edited",
    "description": "Fork of the Publii Team's Email Address Obfuscation plugin. Adds fragment method: per-build random cipher and attribute names, chunked email with decoys, click-to-reveal gate, headless-browser detection, honeypot trap email.",
    "license": "GPL-3.0",
    "author": "InPoint Automation",
    "version": "1.1.0",
    "scope": "site",
    "minimumPubliiVersion": "0.44.0",
    "config": [
        {
            "name": "globalObfuscation",
            "label": "Global Email Obfuscation",
            "type": "checkbox",
            "value": true,
            "group": "General",
            "note": "When enabled, all emails across the entire website, including both raw emails and mailto links, will be obfuscated. When disabled, you must specify emails to obfuscate in the 'Emails to Obfuscate' field."
        },
        {
            "name": "specificEmailsList",
            "label": "Emails to Obfuscate",
            "type": "textarea",
            "value": "",
            "group": "General",
            "note": "Enter one email per line.",
            "dependencies": [
                {
                    "field": "globalObfuscation",
                    "value": false
                }
            ]
        },
        {
            "name": "obfuscationMethod",
            "label": "Obfuscation Method",
            "type": "radio",
            "value": "fragment",
            "options": [
                {
                    "value": "fragment",
                    "label": "Fragment (recommended)"
                },
                {
                    "value": "reverse",
                    "label": "Reverse"
                },
                {
                    "value": "rot18",
                    "label": "ROT18"
                },
                {
                    "value": "replace",
                    "label": "Replace with Text"
                }
            ],
            "group": "Obfuscation",
            "note": "<strong>- Fragment (recommended):</strong> Strongest. Email encoded with a cipher randomised on every build, split into chunks under random attribute names, decoys mixed in. Requires JavaScript. Extra protections in the Hardening group. <br><br><strong>- Reverse:</strong> Reverses character order. Requires JavaScript. <br><br><strong>- ROT18:</strong> Shifts letters by 18, digits by 5. Requires JavaScript. Stronger than reverse. <br><br><strong>- Replace with Text:</strong> Swaps '@' and '.' for custom text like ' AT ' and ' DOT '. Works without JavaScript, email stays human-readable."
        },
        {
            "name": "atReplacement",
            "label": "Replacement for @",
            "type": "text",
            "value": "AT",
            "group": "Obfuscation",
            "note": "The text that will replace the <strong style=\"color: var(--link-primary-color)\">@</strong> symbol in the email address.",
            "dependencies": [
                {
                    "field": "obfuscationMethod",
                    "value": "replace"
                }
            ]
        },
        {
            "name": "dotReplacement",
            "label": "Replacement for .",
            "type": "text",
            "value": "DOT",
            "group": "Obfuscation",
            "note": "The text that will replace the <strong style=\"color: var(--link-primary-color)\">.</strong> symbol in the email address.",
            "dependencies": [
                {
                    "field": "obfuscationMethod",
                    "value": "replace"
                }
            ]
        },
        {
            "name": "randomizeClassName",
            "label": "Randomise Marker Class Name",
            "type": "checkbox",
            "value": true,
            "group": "Hardening",
            "note": "New random class name every build. Scrapers cannot target the plugin's markup. Disable if your theme's CSS styles 'obfuscated-email' directly."
        },
        {
            "name": "enableRevealGate",
            "label": "Click-to-Reveal Gate",
            "type": "checkbox",
            "value": true,
            "group": "Hardening",
            "note": "Email decoded only when the visitor clicks. Bots that load the page and scrape the DOM get nothing, even ones running JavaScript.",
            "dependencies": [
                {
                    "field": "obfuscationMethod",
                    "value": "fragment"
                }
            ]
        },
        {
            "name": "revealLabel",
            "label": "Reveal Link Label",
            "type": "text",
            "value": "Show email address",
            "group": "Hardening",
            "note": "Text shown on the reveal link before the email is displayed.",
            "dependencies": [
                {
                    "field": "enableRevealGate",
                    "value": true
                }
            ]
        },
        {
            "name": "requireHumanSignal",
            "label": "Require Input Before Reveal",
            "type": "checkbox",
            "value": true,
            "group": "Hardening",
            "note": "Reveal click works only after mouse, touch, key, or scroll input",
            "dependencies": [
                {
                    "field": "enableRevealGate",
                    "value": true
                }
            ]
        },
        {
            "name": "enableDecoyFragments",
            "label": "Enable Decoy Fragments",
            "type": "checkbox",
            "value": true,
            "group": "Hardening",
            "note": "Revealed email is interleaved with hidden junk characters. Copy-paste is unaffected.",
            "dependencies": [
                {
                    "field": "obfuscationMethod",
                    "value": "fragment"
                }
            ]
        },
        {
            "name": "trapMode",
            "label": "Honeypot Trap Email",
            "type": "radio",
            "value": "disabled",
            "options": [
                {
                    "value": "disabled",
                    "label": "Disabled"
                },
                {
                    "value": "random",
                    "label": "Fake, randomised each build"
                },
                {
                    "value": "inbox",
                    "label": "Dedicated trap inbox"
                }
            ],
            "group": "Hardening",
            "note": "A hidden plaintext trap address is injected on every page and served to detected headless browsers. <br><br><strong>- Fake, randomised:</strong> Random non-existent address at your domain, changes every build. Ensure your mail server rejects unknown addresses. <br><br><strong>- Dedicated trap inbox:</strong> A mailbox you specify. Any mail arriving there came from a scraper so you can blocklist the sender."
        },
        {
            "name": "trapDomain",
            "label": "Trap Domain",
            "type": "text",
            "value": "",
            "group": "Hardening",
            "note": "Your own domain, e.g. example.com.",
            "dependencies": [
                {
                    "field": "trapMode",
                    "value": "random"
                }
            ]
        },
        {
            "name": "trapEmail",
            "label": "Trap Inbox Address",
            "type": "text",
            "value": "",
            "group": "Hardening",
            "note": "Full address of the trap mailbox, e.g. trap@example.com.",
            "dependencies": [
                {
                    "field": "trapMode",
                    "value": "inbox"
                }
            ]
        }
    ]
}