Enable dragging of content from different domains within a window
This value controls whether Internet Explorer permits users to drag content from one domain to another when the source and destination are in the same browser window.
since 0.9.8.11
Purpose
Show registry keys (2)
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2708HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2708
This value controls whether Internet Explorer permits users to drag content from one domain to another when the source and destination are in the same browser window. It applies specifically to content evaluated in the Internet zone.
In the allowing state, cross-domain dragging within a window is permitted. In the blocking state, Internet Explorer prevents the transfer and users cannot override the enforced choice through Internet Options.
Notes
Security
Allowing this behavior provides a user-initiated path for moving data across an origin boundary. Data included in the drag operation can consequently become available to the receiving domain. Blocking the behavior removes that cross-domain transfer path.
This setting does not generally disable the same-origin restrictions or grant scripts unrestricted access to another domain. It also does not control ordinary file drag-and-drop or file copy-and-paste operations, nor does it govern dragging between separate browser windows; those behaviors have separate zone settings.
Possible side effects
Blocking the behavior can disrupt web applications that rely on drag-and-drop between components hosted on different domains within one window, including applications composed of embedded cross-origin content.
Notes
The Zones\3 subkey identifies the Internet zone, so the setting affects content according to its Windows security-zone assignment. The HKLM value represents computer policy, while the HKCU value represents user policy.
When the policy is not enforced, Microsoft documents version-dependent behavior. Internet Explorer 10 initially blocks the operation but lets the user change the setting in Internet Options. Internet Explorer 9 and earlier permit the operation in that state.
This setting belongs to the Internet Explorer web platform. Microsoft Edge uses Windows Security Zones for only a limited set of decisions, while tabs running in Internet Explorer mode evaluate zone settings as Internet Explorer does.
Microsoft documentation
Microsoft Learn: Per-site configuration by policy