Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Scripting of Java applets

This setting controls whether scripts on pages in the **Restricted Sites** zone can access the properties, methods, and events that Java applets expose to scripting.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1402
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1402

This setting controls whether scripts on pages in the Restricted Sites zone can access the properties, methods, and events that Java applets expose to scripting. It governs interaction between scripts and applets; it does not determine whether Java applets are allowed to run.

The 1402 value is a REG_DWORD corresponding to the URLACTION_SCRIPT_JAVA_USE URL action. Its supported policy values have the following meanings:

  • 0: Scripts can access Java applets without prompting the user.
  • 1: The user is prompted before script access is allowed.
  • 3: Scripts are prevented from accessing Java applets.

For the Restricted Sites zone, Microsoft also documents that script access is prevented when the associated policy is not configured.

Notes

Security

Allowing this interaction expands what script code can do on pages deliberately classified as Restricted Sites. A script can invoke interfaces exposed by an applet. Any resulting capabilities depend on the particular applet, the interfaces it exposes, and the separately applicable Java permissions.

This setting does not grant general file-system access or additional Windows user rights, and it does not independently permit Java applets to run. Applet execution also depends on the separate Java permissions setting and the presence of a compatible Java runtime.

Value 1 delegates each access decision to the user. It does not enforce a consistent block and therefore provides a weaker restriction than value 3.

Possible side effects

With value 3, a legacy web application might still load or run an applet but be unable to control it through page scripts. Features that rely on script-to-applet communication can consequently fail or operate only partially.

Notes

The Zones\4 key limits the setting to content classified in the Restricted Sites zone. The HKLM and HKCU entries represent device-scoped and user-scoped policy configuration, respectively. If the separate Security Zones: Use only machine settings policy is enabled, only the machine-level zone settings are used.

This setting belongs to the Internet Explorer platform. Chromium-based Microsoft Edge does not support Java applets. Microsoft Edge's Internet Explorer mode does, however, support Internet Explorer security-zone settings and legacy ActiveX-based components such as Java when the required components are present.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneScriptingOfJavaApplets

Microsoft Learn: URL Policy Flags

Microsoft Learn: What is Internet Explorer mode?

See also