Stop Facebook click tracking

from blog The Desolation of Blog, | ↗ original
Earlier this year I wrote about how Gmail hijacks your link clicks, swapping the visible URL with a tracking URL hidden in the data-saferedirecturl attribute of the HTML anchor element. Fortunately, my browser extension StopTheMadness protects you from this Gmail "clickjacking". I don't use Facebook, so I hadn't noticed, but a StopTheMadness customer reported a similar problem happening there. On investigation, we found that links in Facebook DMs were using the data-lynx-uri attribute to hide an https://l.facebook.com/l.php tracking URL.