Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow updates to status bar via script

This registry value determines whether scripts on pages in the Internet zone may change the text displayed in the Internet Explorer status bar.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2103
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2103

This registry value determines whether scripts on pages in the Internet zone may change the text displayed in the Internet Explorer status bar. The value name 2103 identifies the URLACTION_FEATURE_SCRIPT_STATUS_BAR URL action, whose numeric identifier is 0x00002103.

The value uses the REG_DWORD type. A value of 0 represents URLPOLICY_ALLOW and permits status-bar updates. A value of 3 represents URLPOLICY_DISALLOW and blocks them. When the URL action is blocked, changes made through the script properties for the current or default status text are ignored.

Notes

Security

When updates are allowed, a webpage whose script is already permitted to run can place arbitrary text in the status bar. Information displayed there therefore cannot be treated as a reliable indication of a link's actual destination or the state of the page. For example, a malicious page could display misleading destination text.

This setting does not enable scripting or grant access to files, credentials, or other system resources. It has an effect only when script execution is already permitted by other security settings, and it adds only the ability to modify status-bar text.

Possible side effects

When status-bar updates are blocked, legacy websites or browser-based applications cannot use the status bar for their own progress messages, state information, or notifications. The value does not directly disable other script functionality.

Notes

The Zones\3 subkey represents the Internet zone. The value under HKLM belongs to the computer configuration, while the value under HKCU belongs to the user configuration.

This setting is part of the Internet Explorer security-zone model. Microsoft documents the corresponding ADMX-backed policy for both device and user scope.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowUpdatesToStatusBarViaScript

Microsoft Learn: URL Action Flags – URLACTION_FEATURE_SCRIPT_STATUS_BAR

Microsoft Learn: URL Policy Flags

See also