Website Options:
You can selectively enable and disable StopTheMadness features. Your custom options can be configured to apply to every web page or just to web sites that you specify. To change the options, open the StopTheMadness popup from Safari's address bar.
There are a number of protection features that you can enable and disable. By default, the "Recommended" features are enabled. These provide you with a high level of protection while also maximizing website compatibility. The features labeled "Use with caution" provide even higher levels of protection, but there may be more sites that don't work right when they're enabled, which is why they're disabled by default. The features labeled "Keyboard-related" are intended to be used only on an iPad with an external hardware keyboard attached. Any and all of the features can be enabled or disabled as necessary or desired. Below is an explanation of each feature.
Recommended:
- Bypass AMP: When enabled, StopTheMadness detects Google AMP and automatically loads the "canonical" non-AMP link instead. By default, Bypass AMP still allows the "AMP viewer" frame in a page, for example on Google Images Search (
www.google.com) and Google News (news.google.com), because many people like to browse quickly through lists of images or articles. If you prefer to bypass both AMP links and the AMP viewer, switch from "links" to "links and viewer" in the popup menu. - Bypass link shorteners: When enabled, StopTheMadness automatically checks the links you click for known link shorteners —
bit.ly,tinyurl.com,t.co(Twitter),news.google.com,l.facebook.com, etc. — and replaces the shortened URL with the unshortened destination URL. This occurs in a sandboxed process, without setting any cookies or other site data in Safari, so you can't be tracked by your click.
The Link shorteners feature also loads clicked Apple News links in Safari instead of the News app. - Hide some app banners: When enabled, popup banners prompting you to get the App Store app are automatically hidden on Google, DuckDuckGo, Reddit, Tumblr, and Instagram. Smart app banners that appear at the top of web pages are also hidden. This feature is enabled by default.
- Input maxlength warning: When enabled, StopTheMadness warns you if the characters you type or paste into a password field or other input field exceed the maximum length of the field. If this feature is disabled, then some of the characters you type or paste into a password field can get silently lost, with no warning.
- Protect autocomplete: When enabled, autocompletion and AutoFill of user names, passwords, and other information always works in web forms. When disabled, websites can prevent AutoFill.
- Protect contextual menus: When enabled, you can always open Safari's contextual menu. When disabled, websites can prevent you from opening the contextual menu or substitute their own menu for Safari's.
- Protect copy, cut, and paste: When enabled, you can always copy, cut, and paste text on a web page. When disabled, websites can prevent you from doing copy, cut, and paste.
- Protect drag and drop: When enabled, you can always drag and drop on a web page. When disabled, websites can prevent you from doing drag and drop.
- Protect tab closing and page visibility: When enabled, you can always immediately close a tab. When disabled, websites can stop you from closing a tab or window. Instead, Safari may show a popup alert that asks "Are you sure you want to leave this page?" when you try to close a tab or a window.
The Tab closing and visibility feature also prevents websites from observingvisibilitychangeevents, which are part of the Page Visibility API. Using this API, websites can learn when a tab is visible on your screen and when the tab is hidden. When Tab closing and visibility is enabled, websites can't observe when you show or hide a tab or your screen. - Protect text selection: When enabled, you can always select text on a web page. When disabled, websites can prevent you from selecting text.
- Stop link trackers: When enabled, your privacy is protected on the web in a a number of ways:
- Stops hyperlink auditing by removing the anchor "ping" attribute on link clicks.
- Stops tracking beacons (
Navigator.sendBeacon) from firing. - Prevents hijacking/rewriting of clicked links in Google Search results.
- Prevents hijacking/rewriting of clicked links in Gmail.
- Prevents hijacking/rewriting of clicked links in Facebook.
- Removes tracking tags such as
utm_source(Urchin Tracking Module),gclid(Google Click ID), andfbclid(Facebook Click ID) from the end of the URL when you click, drag, or open a contextual menu on a link.
Use with caution:
- Bring images to the front: When enabled, all images on the page are forced to the front. This can help on websites such as Instagram that put a transparent overlay in front of images, which prevents you from dragging or opening the contextual menu for an image. Images in front is disabled by default, because it can mess up the page layout on some sites.
- Force external links into current tab: Websites frequently add
target="_blank"to a link to make the link automatically open in a new tab when you click. If you prefer to open links in the current tab instead of a new tab, you can enable this feature, which removestarget="_blank"from links. When enabled, normal link clicks always open in the current tab. When this feature is disabled, some links may automatically open in new tabs when clicked. - Force external links into new tab: When enabled, cross-site links (links with a different domain than the current website) will always open in a new tab. This can be useful for reading Google News, for example, especially with the "Bypass AMP" and "Bypass link shorteners" website options. When this feature is disabled, cross-site links may open in the same Safari tab.
- Protect pointer movement: When enabled, websites cannot use JavaScript to track the movement of your finger on the web page. You may want to enable this feature to protect your privacy. When this feature is disabled, websites can use JavaScript to track the movement of your finger.
- Protect scrolling: When enabled, websites cannot prevent or hijack scrolling. Websites often use "scrolljacking" for annoying purposes, such as popup videos on scroll. When the scrolling option is disabled, websites can scrolljack. This feature is disabled by default, because it causes incompatibilities with a number of websites, especially sites with "infinite scrolling". See Known Issues for a few examples.
- Protect textareas: When enabled, multi-line text editors (HTML
textareaelements) are also protected by the website options "Protect ⌘-key shortcuts", "Protect copy, cut, and paste", and "Protect text selection". By default, only single-line editors (HTMLinputelements) are protected, because multi-line editors don't usually prevent copy and paste, and a lot of websites have special multi-line "rich text" editors with highly customized editing that can break with the textarea feature enabled. However, you may need to enable this feature on certain websites if they disable copy and paste. - Protect zooming: When enabled, StopTheMadness allows you to zoom in and out on the web page, with the pinch gesture or with Safari's toolbar controls. When disabled, websites (for example, Old Reddit) can prevent you from zooming on the page. This feature is disabled by default.
- Show native video controls: When enabled, video controls are shown by default, and you can always click on a video to control it or show the contextual menu for videos. When disabled, websites can cover videos with a transparent overlay that prevents you from directly controlling the video. This feature is disabled by default, because a lot of websites have custom video controls and don't use the HTML5 default controls.
- Stop video autoplay: When enabled, videos are prevented from autoplaying. This happens regardless of Safari's Auto-Play Preferences, and it works even on sites where Safari's Auto-Play Preferences don't work, such as YouTube. When disabled, websites can autoplay videos without any user interaction. This feature is disabled by default.
- Stop all audio and video: When enabled, no audio or video is ever allowed to play on the page, not even if you press the play button. Usually this feature isn't necessary, because "Stop video autoplay" works well in most cases. However, if you're playing audio in a background app such as Music, some websites in Safari can still interrupt and pause your background audio. "Stop all audio and video" can help in these cases. (Note that enabling "Stop audio and video" takes effect immediately, but if you switch it from on to off, you need to reload the current web page to allow media again.) This feature is disabled by default.
Keyboard-related:
- Hover shortcuts: When enabled, you can delete any HTML element on the page by hovering over it and pressing the ⌘-delete keyboard shortcut. There's a confirmation dialog, which you can skip with the option key: ⌥⌘-delete.
- Protect ⌘-click: When enabled, ⌘-click always opens links in a new tab. When disabled, websites can prevent you from opening links in a new tab.
- Protect ⌘-key shortcuts: When enabled, ⌘-key shortcuts always go to Safari. When disabled, websites can hijack or disable keyboard shortcuts.
- Stop ⌘-arrow page navigation: Inside an editable text field, ⌘-left-arrow and ⌘-right-arrow put the cursor at the beginning or end of the current line of text. However, outside an editable text field, ⌘-left-arrow makes you navigate back to the previous page in your web browsing history, and ⌘-right-arrow makes you navigate forward. This page navigation is often accidental and unwanted! Stop ⌘-arrow page navigation prevents these keyboard shortcuts from causing page history navigation, while still allowing you to use the keyboard shortcuts in editable text fields. This feature is disabled by default. Enable it to prevent unwanted history navigation.
Custom <style> element and Custom <script> element:
If you enter text into this area, StopTheMadness will create a custom HTML <style> or <script> element on the web page. The text you enter will become the element's inline CSS or JavaScript. If the text area is empty, then no custom element is created on the web page. StopTheMadness doesn't check your syntax, so you'll probably want to copy the CSS and JS from elsewhere and paste it into StopTheMadness. If you have a CSS or JS file open in the active Safari tab, then StopTheMadness will automatically insert the file's text when you tap inside the empty "Custom <style> element" or "Custom <script> element" area; this makes it easy to import files from userscript sites such as Greasy Fork. (The custom <script> element is created after the DOMContentLoaded event.)
When you change the website options in StopTheMadness, those changes apply immediately to the active Safari tab, and will apply to all web pages loaded thereafter in any tab. If you already had a web page open in a background tab before you changed the website options, and you want the changes to apply immediately to that web page, you need to switch to the tab and reload the page.
