Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow loading of XAML files

The `2402` value controls whether Internet Explorer loads standalone XAML files for websites in the Restricted Sites zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2402
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2402

The 2402 value controls whether Internet Explorer loads standalone XAML files for websites in the Restricted Sites zone. XAML is an XML-based declarative language used by Windows Presentation Foundation to describe user interfaces and graphics.

The value uses the REG_DWORD data type and Internet Explorer URL policy values:

  • 0 (URLPOLICY_ALLOW): XAML files are loaded automatically without prompting the user.
  • 1 (URLPOLICY_QUERY): The user is prompted before a XAML file is loaded.
  • 3 (URLPOLICY_DISALLOW): XAML files are not loaded.

When the corresponding policy is not configured, the user can determine the behavior through Internet Options.

Notes

Security

Automatic loading removes a protective restriction for XAML files in the Restricted Sites zone. Internet Explorer can therefore process XAML content from websites explicitly assigned to this highly restrictive zone without first obtaining the user's consent.

This setting does not give the loaded content administrative privileges, unrestricted file access, or unrestricted access to other system resources. Other security controls and permission boundaries continue to apply independently.

Possible side effects

Blocking XAML files can prevent legacy websites or applications designed for Internet Explorer from working when their presentation depends on such files. With value 1, loading depends on the user's response and can be interrupted by the additional prompt.

Notes

The Zones\4 portion of the key limits the setting to the Restricted Sites zone. The two registry locations represent the computer and user configurations of the same policy.

Value 2402 applies to standalone or loose XAML files. It is distinct from the separate zone settings for XAML browser applications (2400) and XPS documents (2401).

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowLoadingOfXAMLFiles

Microsoft Learn: URL Policy Flags

See also