We use the SpamSpan filter to hide email addresses from harvesting robots.
In the fall of 2014, a new maintainer published a flurry of updates which culminated in a release that apparently fixed some earlier problems while causing a new one; see: https://www.drupal.org/node/2386967. In accordance with that bug report, I commented out lines 18-20 in $D7/sites/all/modules/spamspan/spamspan.js, and that fixed the problem. (An unmodified copy of the file can be found in spamspam.js.ORIG.)