Security pane of Safari preferences

Block or allow certain types of web content in Safari, and turn security warnings on and off. To set these options, open Safari, choose Safari > Preferences, then click Security.

Open Safari for me

Warn when visiting a fraudulent website

Safari warns you if the site you are visiting is a suspected phishing website. Phishing is a fraudulent attempt to steal your personal information, such as user names, passwords, and other account information. A fraudulent website masquerades as a legitimate one, such as a bank, financial institution, or email service provider.

Enable JavaScript

Allow JavaScript, which websites use for buttons, forms, and other content. Some websites can’t work properly if you disable JavaScript.

Block pop-up windows

Block ads displayed in pop-up windows that appear when you open or close a webpage. However, some websites use pop-up windows for essential content.

Allow WebGL

Let Safari show hardware-accelerated interactive 2D and 3D graphics on websites that use WebGL. No Safari plug-ins are required.

Click Website Settings to see which websites you visited use WebGL, and set blocking policies for WebGL.

To set a blocking policy for a visited website that uses WebGL, select the website, then click its pop-up menu and choose a policy:

  • Ask: When you visit the website, Safari displays a dialog asking whether you want to trust the website’s use of WebGL. See If a website has WebGL graphics.

  • Block: When you visit the website, Safari tells the website WebGL isn’t supported.

  • Allow: Safari lets the website use WebGL, unless WebGL presents a security risk on your computer.

  • Allow Always: Safari lets the website use WebGL, even if WebGL presents a critical security risk on your computer. Choosing Allow Always may present a security risk, so only select this option for websites you trust.

To set the blocking policy for other websites that use WebGL, click the “When visiting other websites” pop-up menu and choose a policy described above.

For more information about WebGL, see the khronos.org/webgl website.

Allow Plug-ins

Let Safari show plug-in content on websites.

Websites use plug-ins for pictures, music, video, animation, interactive features, and other enhancements. Some plug-ins track your browsing history.

Click Website Settings to see which plug-ins are installed, see which websites you visited use each plug-in, and set blocking policies for plug-in use.

To set a blocking policy for a visited website that uses a plug-in, select the plug-in on the left, select the website on the right, then click its pop-up menu and choose a policy:

  • Ask: When you visit the website, Safari displays a placeholder instead of the plug-in content. You can click the placeholder to allow the website to use the plug-in.

  • Block: When you visit the website, Safari displays a placeholder instead of the Internet plug-in content. You can click the placeholder to allow the website to use the plug-in.

  • Allow: Safari lets the website use the plug-in, unless it’s blocked by OS X File Quarantine. For more information, see the Apple Support article support.apple.com/kb/ht3662.

  • Allow Always: Safari lets the website use the plug-in, even if it’s blocked by OS X File Quarantine. Choosing Allow Always may present a security risk, so only choose this policy for a website you trust.

  • Run in Unsafe Mode: Safari lets the website use the plug-in without any malware checks. Choosing Run in Unsafe Mode may present a security risk, so only choose this policy for a website you trust.

To set the blocking policy for other websites that use a plug-in, select the plug-in on the left, then click the “When visiting other websites” pop-up menu and choose a policy described above.

See also
If a website has plug-in content