Email obfuscation script goes defer, and stops blocking your render!

Hey there, it's me, Shiichan! Today I found a small but nice update that makes your pages load a little faster, so let me share it with you.

Cloudflare Changelog developers.cloudflare.com

What was announced?

This one comes from the Cloudflare Changelog. The decode script email-decode.min.js, which runs on zones with Email Address Obfuscation enabled, now loads with the defer attribute. That means the script no longer blocks your page from rendering.

The story so far

Until now, this script ran inline while the HTML was being parsed. So rendering was blocked a little until that work finished.

What changes

With defer, the script now downloads in parallel with HTML parsing. Then it runs after the document finishes parsing, right before the DOMContentLoaded event.

Thanks to this, page loading performance improves, and it contributes positively to Core Web Vitals across all zones with Email Address Obfuscation enabled. The change applies automatically, so no action is needed on your side.

Dive Deep

One thing to watch out for. If you have custom JavaScript that assumes email addresses are decoded at a specific moment during load, you may need to adjust it, because the decode script now runs post-parsing instead of inline.

This feature is part of WAF Scrape Shield.

Wrap-up

• email-decode.min.js now uses defer -> it no longer blocks rendering
• It downloads alongside HTML parsing and runs before DOMContentLoaded
• It boosts Core Web Vitals on zones with Email Address Obfuscation enabled, with no config change
• If your custom JS depends on decode timing, double-check its behavior

This one is great for anyone using email obfuscation who wants a little extra page speed!