Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow cut, copy or paste operations from the clipboard via script

This policy controls whether scripts in webpages assigned to the Internet zone may perform clipboard operations such as cut, copy, or paste.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1407
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1407

This policy controls whether scripts in webpages assigned to the Internet zone may perform clipboard operations such as cut, copy, or paste. The 3 in the registry path identifies the Internet zone.

The 1407 value is a REG_DWORD that uses the Internet Explorer URL policy values:

  • 0 (URLPOLICY_ALLOW): Allow the scripted operation without prompting.
  • 1 (URLPOLICY_QUERY): Ask the user for permission before the operation.
  • 3 (URLPOLICY_DISALLOW): Block the scripted operation.

The policy supports both computer and user configuration. Its value can therefore appear under HKLM or HKCU, depending on the policy scope.

Notes

Security

With a value of 0, scripts from the Internet zone can invoke the clipboard functions covered by this policy without obtaining consent for each operation. Subject to the scripting and browser APIs available to the page, this may allow a website to read clipboard data or replace clipboard contents. Sensitive information such as passwords or access tokens may be exposed if it is present on the clipboard.

A value of 1 retains a user-consent prompt. A value of 3 prevents script access governed by this URL action. The policy does not block ordinary clipboard operations that the user performs directly outside this scripting mechanism.

Possible side effects

Blocking clipboard operations or requiring confirmation can disrupt legacy web applications. Script-driven copy or paste buttons may stop working or may produce repeated security prompts.

Notes

This setting belongs to the Internet Explorer security-zone model and applies only to content assigned to the Internet zone. It is distinct from the policy governing drag-and-drop or file copy operations and from the clipboard permissions used by the native Microsoft Edge browser.

When the policy value is absent, the effective zone default for the applicable Windows and browser configuration is used. Microsoft documentation for different product generations reports different unconfigured behavior, so the absence of the value does not establish one universal default across all versions.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowCopyPasteViaScript

Microsoft Learn: URL Policy Flags

See also