Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
By Sarah Gooding - Jan 30, 2025
New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →
mailto-fixer
Advanced tools
mailto: links are outdated. mailtoFixer.js fixes that.
Quick start
Mailto links are a simple and effective way to send an email, but users feel frustrated when they click a mailto link and it opens their default email client, which they never wanted. mailtofixer.js fixes that.
- Include the
mailtoFixer.jsin your web page. You can do so by pasting this code snippet into the<head>section of your HTML:
<script src="https://cdn.jsdelivr.net/npm/mailto-fixer/dist/mailtoFixer.min.js"></script>
- Done! Now, every
mailto:link in your page is automatically upgraded: when a user clicks on it, it opens a nice modal that gives users the choice to do what they actually want and expect. screenshot
Want to avoid spam? Use the obfuscation feature
In addition to the above, mailtoFixer.js also gives you the option to obfuscate your email to protect you from spam.
Spammers often use parsers to look for email addresses in your pages' HTML. To avoid that, gives you the option to use a different syntax for obfuscating your email address.
How to obfuscate your email address? Instead of using this:
<a href="mailto:john@gmail.com">This is a mailto link</a>
Just use this equivalent syntax:
<a href="#" data-mailtofixer-username="john" data-mailtofixer-domain="gmail.com">This is an obfuscated mailto link</a>
If you also want the text inside the tag to be replaced with the email address, just add the data-mailtofixer-replace-content=true attribute to the tag. Example
<a href="#" data-mailtofixer-username="john" data-mailtofixer-domain="gmail.com" data-mailtofixer-replace-content="true">This text will be replaced with the email address</a>
"Is this actually enough to protect me from spam?"
You're right, a spammer could easily find your email address by evaluating the JavaScript in your page or by detecting this syntax. But most spammers are lazy: they don't evaluate JavaScript and are just looking for plain email addresses. This should be enough to protect you from the vast majority of spammers.
Customization
You can currently customize the look of the modal by overriding the CSS classes defined in the /src/styles.css file.
Roadmap
Feel free to open a pull request to add more features!
[] Support default subject and body for Gmail and Outlook. [] Adding dark mode. [] Add support for other email providers? [] Nicer UI?
Keywords
FAQs
A library for better mailto links.
We found that mailto-fixer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 27 Apr 2024
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
Security News
North Korean APT Lazarus Targets Developers with Malicious npm Package
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
By Kirill Boychenko, Peter van der Zee - Jan 29, 2025
Security News
CISA Brings KEV Data to GitHub
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.
By Sarah Gooding - Jan 29, 2025