Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow cut, copy or paste operations from the clipboard via script

The `1407` registry value controls whether scripts in the Internet Explorer Restricted Sites security zone can perform clipboard operations such as cut, copy, or paste.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1407
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1407

The 1407 registry value controls whether scripts in the Internet Explorer Restricted Sites security zone can perform clipboard operations such as cut, copy, or paste. It represents the URLACTION_SCRIPT_PASTE URL security action.

The value uses the REG_DWORD data type. The defined data values are:

  • 0 (URLPOLICY_ALLOW): Allows scripted clipboard operations without prompting the user.
  • 1 (URLPOLICY_QUERY): Prompts the user before allowing the operation.
  • 3 (URLPOLICY_DISALLOW): Prevents scripted clipboard operations.

This setting applies only to content assigned to the Restricted Sites zone, identified by zone number 4. It does not control general use of the Windows clipboard or manual cut, copy, and paste operations performed by the user. Dragging, copying, or pasting files is governed by a separate zone setting.

Notes

Security

With a value of 0, running scripts can use the clipboard capabilities exposed by the supported scripting and browser environment without prior user confirmation. This can allow clipboard contents to be disclosed or replaced. The risk is especially relevant in the Restricted Sites zone, which is intended for content assigned a low level of trust.

A value of 1 makes each operation subject to user approval, while 3 blocks this scripted access path. The setting does not disable scripting as a whole and does not prevent other methods of transferring data.

Possible side effects

Legacy web applications that depend on scripted clipboard access might lose some cut, copy, or paste functionality when the value is 3. A value of 1 can interrupt workflows with repeated confirmation prompts.

Notes

The policy is available in both Computer Configuration and User Configuration. The HKLM location contains the device-scoped policy value, while the HKCU location contains the user-scoped policy value.

When this policy is not configured for the Restricted Sites zone, Internet Explorer does not allow scripts in that zone to perform clipboard operations by default.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowCopyPasteViaScript

Microsoft Learn: URL Action Flags – URLACTION_SCRIPT_PASTE

Microsoft Learn: URL Policy Flags

See also