Enable dragging of content from different domains across windows
The `2709` `REG_DWORD` value controls whether content can be dragged between different domains when the source and destination are in separate windows.
since 0.9.8.11
Purpose
Show registry keys (2)
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2709HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2709
The 2709 REG_DWORD value controls whether content can be dragged between different domains when the source and destination are in separate windows. It applies to the Internet zone.
A value of 0 permits the operation. A value of 3 blocks it. When either result is enforced through policy, users cannot change the decision through Internet Options.
The HKLM path holds the computer-scoped policy instance, while the HKCU path holds the user-scoped instance. Zone number 3 represents the Internet zone.
Notes
Security
Allowing this operation creates a content-transfer path between separate domains. Content supplied by an untrusted or compromised site can therefore be dragged into a window associated with another domain. Blocking the operation closes this specific cross-domain transfer path.
This setting does not provide general access to another domain's content, broadly bypass same-origin restrictions, or grant file-system or administrative privileges.
Possible side effects
A value of 3 can disrupt legacy web applications and workflows that intentionally transfer content between windows belonging to different domains. It does not control dragging between domains within one window or the separate zone setting for dragging, copying, and pasting files.
Notes
This setting belongs to the Internet Explorer security-zone model. It is not a browser-independent Windows control for all drag-and-drop operations.
An absent policy value is not equivalent to explicitly setting 0 or 3. Microsoft documents version-dependent behavior for an unconfigured policy: Internet Explorer 10 initially blocks the operation but permits the user to change the setting, whereas Internet Explorer 9 and earlier allow the operation and do not permit the user to change it.
Microsoft documentation
Microsoft Learn: URL Policy Flags