Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Navigate windows and frames across different domains

The `1607` `REG_DWORD` value controls the `URLACTION_HTML_SUBFRAME_NAVIGATE` URL action for the Restricted Sites zone (`Zones\4`).

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1607
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1607

The 1607 REG_DWORD value controls the URLACTION_HTML_SUBFRAME_NAVIGATE URL action for the Restricted Sites zone (Zones\4). It determines whether web content in that zone may open or navigate windows and frames across domain boundaries.

The value data has the following meaning:

  • 0: Allow cross-domain navigation without prompting.
  • 1: Prompt the user before allowing the navigation.
  • 3: Block the navigation.

When the corresponding policy is not configured, Internet Explorer blocks this action in the Restricted Sites zone.

Notes

Security

Allowing the action reduces the isolation applied to restricted sites. Content from a domain classified as restricted can initiate navigation of windows or frames to other domains, potentially displaying content from another origin in an existing window or frame context without prior confirmation.

This setting does not by itself grant read access to content from another domain or remove all same-origin restrictions. Cross-domain data access and the launching of applications or downloading of files from an IFRAME are controlled by separate URL actions.

Possible side effects

Blocking the action can disrupt legacy web applications that use frames hosted on multiple domains for sign-in, navigation, or embedded content. A value of 1 can preserve these workflows but introduces a security prompt.

Notes

The HKLM path represents computer policy, while the HKCU path represents user policy. Both values apply specifically to the Restricted Sites zone.

This setting is part of the Internet Explorer security-zone model. It can remain relevant to content processed by the Internet Explorer engine, particularly in Microsoft Edge Internet Explorer mode. The standalone Internet Explorer 11 desktop application is no longer supported or has been disabled on certain Windows versions.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneNavigateWindowsAndFrames

Microsoft Learn: URL Policy Flags

Microsoft Learn: Internet Explorer 11 desktop application end of support

See also