Enable dragging of content from different domains within a window
This ADMX-backed Internet Explorer policy controls whether users can drag content between different domains when the source and destination are in the same browser window.
since 0.9.8.11
Purpose
Show registry keys (2)
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2708HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2708
This ADMX-backed Internet Explorer policy controls whether users can drag content between different domains when the source and destination are in the same browser window. It applies only to sites in the Restricted Sites Zone, represented by the Zones\4 subkey.
Selecting Enable within the policy permits cross-domain dragging in a window. Selecting Disable blocks it. In either case, users cannot override the enforced choice through Internet Options.
The policy does not control dragging between separate browser windows, nor does it generally control dragging, copying, or pasting files.
Notes
Security
Allowing this behavior expands the user-mediated data-transfer mechanisms available between documents from different domains. It therefore removes an additional layer of protection at the domain boundary for this specific operation. Microsoft introduced the ability to block cross-domain drag-and-drop actions as a defense-in-depth measure.
The setting does not disable the same-origin policy as a whole, grant websites general file-system access, or provide unrestricted access to content from other domains. Its effect is limited to drag-and-drop operations within the same window and the applicable security zone.
Possible side effects
Blocking cross-domain dragging can disrupt legacy web applications or composite pages whose interfaces rely on transferring content by drag and drop between different domains within one window.
Notes
The registry locations under HKLM and HKCU represent the computer and user policy scopes, respectively. The value name 2708 identifies this security-zone action.
This setting is part of the Internet Explorer inetres.admx policy template. It is distinct from Enable dragging of content from different domains across windows and Allow drag and drop or copy and paste files.
Microsoft documentation
Microsoft Learn: Microsoft Security Bulletin MS11-057