Allow META REFRESH

Purpose

Show registry keys (2)

• HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1608
• HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1608

This policy controls whether pages in the Internet Explorer Restricted Sites zone may use an active Meta Refresh element to reload automatically or redirect the browser to another webpage.

The 1608 value represents the URLACTION_HTML_META_REFRESH zone action and has the REG_DWORD data type. A value of 0 (URLPOLICY_ALLOW) permits the action, while 3 (URLPOLICY_DISALLOW) blocks it. Enabling the policy allows Meta Refresh. Disabling or not configuring the policy prevents pages in this zone from using it.

Notes

Security

Allowing Meta Refresh lets a page in the Restricted Sites zone initiate navigation without further user action. This can facilitate unwanted or deceptive redirects.

The setting does not grant additional scripting, file, or ActiveX permissions, nor does it override other security-zone controls. It governs only refreshes or navigation initiated through Meta Refresh.

Possible side effects

When Meta Refresh is blocked, pages that depend on it for automatic updates, timed redirects, or navigation to a subsequent page may no longer behave as intended.

Notes

The setting applies only to the Restricted Sites zone (Zones\4) and to applications or components that evaluate Internet Explorer URL security-zone policy. It is not a general redirect policy for every browser installed on Windows.

The HKLM path holds the computer policy, while the HKCU path holds the user policy. If both policy locations provide a value for the same zone action, the computer policy takes precedence.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowMETAREFRESH

Microsoft Learn: URL Policy Flags

See also

• Entry in the reference