Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow scripting of Internet Explorer WebBrowser controls

This policy determines whether pages in the **Restricted Sites** zone may control embedded Internet Explorer WebBrowser controls through script.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1206
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1206

This policy determines whether pages in the Restricted Sites zone may control embedded Internet Explorer WebBrowser controls through script.

The value name 1206 represents the URL action URLACTION_ACTIVEX_NO_WEBOC_SCRIPT (0x00001206). It is a REG_DWORD value:

  • 0 (URLPOLICY_ALLOW) permits script access to the WebBrowser control.
  • 3 (URLPOLICY_DISALLOW) blocks script access.

The HKLM path represents the computer-scoped policy, while the HKCU path represents the user-scoped policy.

Notes

Security

Allowing script access increases the capabilities available to content that has explicitly been placed in the Restricted Sites zone. Such content can use the scripting interfaces exposed by an embedded WebBrowser control.

This setting does not independently enable Active Scripting, permit arbitrary ActiveX controls to run, or override functions blocked by other zone policies. The actions available to a page remain dependent on the hosted control, its exposed interfaces, and the other Internet Explorer security settings in effect.

Possible side effects

Blocking script access can prevent legacy websites or applications from working correctly when they embed a WebBrowser control and use script to interact with its content. The restriction applies only where the Restricted Sites security zone governs the content.

Notes

This setting belongs to the legacy Internet Explorer and MSHTML technology stack. It can remain relevant to applications that host the Internet Explorer WebBrowser ActiveX control and use Internet Explorer security-zone policies.

When the policy is not configured, users can change script access through the zone settings. Microsoft documents the default behavior as allowing access only in the Local Machine and Local Intranet zones, not in the Restricted Sites zone.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – Restricted Sites Zone: Allow scripting of Internet Explorer WebBrowser controls

Microsoft Learn: URL Action Flags – URLACTION_ACTIVEX_NO_WEBOC_SCRIPT

Microsoft Learn: URL Policy Flags

See also