Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Navigate windows and frames across different domains

This setting controls the `URLACTION_HTML_SUBFRAME_NAVIGATE` URL security action for the Internet zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1607
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1607

This setting controls the URLACTION_HTML_SUBFRAME_NAVIGATE URL security action for the Internet zone. It determines whether windows and embedded frames may navigate to content in a different domain.

The 1607 value uses the REG_DWORD type. Its supported policy values have the following meanings:

  • 0: Allow cross-domain navigation without prompting.
  • 1: Ask the user for permission before allowing the navigation.
  • 3: Block cross-domain navigation.

The setting is particularly relevant to pages that combine frames or IFRAMEs from different domains. It does not control general access to data belonging to another domain.

Notes

Security

Allowing the action without a prompt gives Internet-zone content greater ability to change the destinations displayed in frames belonging to another domain. A malicious or compromised page can consequently redirect embedded content to a different website without obtaining the user's consent first. This can facilitate deceptive navigation or the display of unexpected content.

This setting does not, by itself, remove same-origin restrictions on reading another domain's document contents, cookies, or other data. Cross-domain data access is governed by separate security actions.

Possible side effects

Blocking the action can disrupt legacy web applications that depend on cross-domain frames for navigation, portal integration, or embedded applications. Setting the value to 1 can cause affected pages to display repeated security prompts.

Notes

The Zones\3 subkey identifies the Internet zone. The HKLM path represents the computer policy scope, while the HKCU path represents the user policy scope.

This setting belongs to the Internet Explorer security-zone model. It can also affect content rendered in Microsoft Edge using Internet Explorer mode, which supports Internet Explorer settings and Group Policies that govern security zones. It does not generally control frame navigation on pages rendered by the modern Microsoft Edge engine.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP — InternetZoneNavigateWindowsAndFrames

Microsoft Learn: URL Action Flags — URLACTION_HTML_SUBFRAME_NAVIGATE

Microsoft Learn: URL Policy Flags

See also