diff --git a/packages/web/src/main.ts b/packages/web/src/main.ts
index 1f9306f..4727974 100644
--- a/packages/web/src/main.ts
+++ b/packages/web/src/main.ts
@@ -19,7 +19,8 @@ if (import.meta.env.VITE_SENTRY_DSN) {
     // Facebook's in-app browser injects its own scripts (iabjs://) and
     // reports their failures as ours when the page unloads.
     // Extensions run their own scripts in the page, and their failures are not ours.
-    denyUrls: [/^iabjs:\/\//, /^(chrome|moz|safari(-web)?)-extension:\/\//],
+    // Safari hides an extension's address behind webkit-masked-url.
+    denyUrls: [/^iabjs:\/\//, /^(chrome|moz|safari(-web)?)-extension:\/\//, /^webkit-masked-url:\/\//],
     ignoreErrors: ["Java object is gone"],
     beforeSend: (event) => JSON.parse(scrub(JSON.stringify(event))),
     beforeBreadcrumb: (crumb) => JSON.parse(scrub(JSON.stringify(crumb))),