Allow updates to status bar via script

Purpose

Show registry keys (2)

• HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2103
• HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2103

The 2103 registry value controls whether scripts from sites in the Restricted Sites Zone may change the text displayed in the Internet Explorer status bar. It represents the URLACTION_FEATURE_SCRIPT_STATUS_BAR URL action (0x00002103).

This value uses the REG_DWORD type. Value data 0 permits scripted status-bar updates, while 3 blocks them. If the corresponding policy is disabled or not configured, scripts are not permitted to update the status bar in this zone.

The setting grants only the ability to change status-bar text. It does not enable scripting itself or confer any other browser capability or permission.

Notes

Security

When updates are allowed, a script can place arbitrary text in the status bar. A site could therefore display misleading destination, status, or progress information. This capability does not by itself provide access to files or credentials, nor does it bypass other security restrictions applied to the zone.

Possible side effects

When status-bar updates are blocked, the browser ignores webpage access to the relevant scripting properties. Legacy web applications that use the status bar for notices, coordinates, progress information, or similar output can consequently lose that part of their user interface.

Notes

The HKLM and HKCU paths represent the device and user forms of this ADMX-backed policy. Zone number 4 identifies the Restricted Sites Zone. The setting affects only content assigned to that zone and only Internet Explorer or hosts that honor its URL security-zone model and the associated URL action.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowUpdatesToStatusBarViaScript

Microsoft Learn: URL Action Flags

See also

• Entry in the reference