Enable dragging of content from different domains across windows
This `REG_DWORD` value controls whether the Internet Explorer security-zone model permits users to drag content between different domains when the source and destination are in separate windows.
since 0.9.8.11
Purpose
Show registry keys (2)
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2709HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2709
This REG_DWORD value controls whether the Internet Explorer security-zone model permits users to drag content between different domains when the source and destination are in separate windows. The Zones\4 key limits the setting to the Restricted Sites zone.
A value of 0 allows the action. A value of 3 disallows it. The setting is available in both computer and user policy scope, represented by the value under HKLM and HKCU, respectively.
Dragging content between different domains within the same window is controlled by a separate setting.
Notes
Security
Allowing this action removes a protective boundary for user-initiated transfers between content from different security domains. A user can drag content from a Restricted Sites window into a window associated with another domain, potentially facilitating unintended transfer of displayed or selected information.
This setting does not by itself give scripts unrestricted cross-domain read access or generally override same-origin restrictions. Its effect is limited to the cross-window drag-and-drop action described here.
Possible side effects
Disallowing the action prevents legitimate workflows that depend on dragging content between windows belonging to different domains.
Notes
This setting belongs to the legacy Internet Explorer security-zone model. It is not a general control for drag-and-drop between Windows applications or for modern browsers. Pages running in Microsoft Edge Internet Explorer mode continue to evaluate Internet Explorer security-zone settings.
When the policy value is absent, the documented behavior depends on the Internet Explorer version. Internet Explorer 10 initially blocks the action but allows users to change the setting through Internet Options. Internet Explorer 9 and earlier allow the action in this state and do not allow users to change the setting.
Microsoft documentation
Microsoft Learn: URL Policy Flags