trac should have an option to obscure all email addresses

[anonymous]

Currently if you add an email address to a ticket's cc, it will be publicly displayed on the webpage. It would be nice if there were a way to obscure this to prevent the addresses from being harvested by spammers. I've attached a prototype to demonstrate the functionality I'd like, but it's not well integrated with the rest of the system.

Thanks!

[Christian Boos]

Thanks, that was one of the missing pieces for #153.

I still hope that we would provide flexible renderers for ticket fields, but in the meantime, this should be a start.

(to be done after the WorkFlow merge)

[Christian Boos]

Updated the CC: rendering patch that eblot posted on #1459, which adds e-mail obfuscation (#153 style)

[Emmanuel Blot]

Combination of both patches

[Emmanuel Blot]

I've combined both patches in one file, but I should say that I'm a bit skeptical about the cc address obfuscation:

We can hide the domain in the CC field of the ticket property box, but we cannot do the same in the CC: text field: email addresses appear with the FQDN, and we cannot mask the domain here.

[Christian Boos]

Wait, why don't you use format_author like shown in attachment:1459.diff​? (that function takes into account the EMAIL_VIEW permission).

Then, for the CC: text field, we could go one little step further and only show it in full for TICKET_ADMINs and have a checkbox: [ ] Add me to CC or [ ] Remove me from CC depending if the current e-mail address if found or not in the field. No datamodel change for that, so this is not really the plan for #1459 but more a workaround for being able to correctly hide the e-mails.

[Emmanuel Blot]

I guess we both are not refering to the same patch: none of the patches described here contain format_author.

Maybe attachment:ticket:153:privacy-r4476.diff​ is the right candidate?

[Christian Boos]

That patch on #153 (or similar) is applied since a long time; no I really meant attachment:1459.diff​, my slightly modified version of your patch attached here.

[Christian Boos]

I'm refactoring a bit the ticket system so that the fields would be rendered in the template in a way similar to browser properties. So this feature will be better done inside the web_ui not in the template.

[Christian Boos]

Done in r5485 (FieldRefactoring branch)

[ThurnerRupert]

see also #5378 for ajax support.

[Christian Boos]

Nearly there in trunk with r5812 and r5813.

Actually, r5812 was about the display of CC: changes in the HTML Change History and in the RSS view of the ticket, not yet when showing changes between arbitrary versions of the Ticket (i.e. the ticket diff view).

[Christian Boos]

Finalized in r5814.