Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Userdata persistence

This setting controls the `URLACTION_HTML_USERDATA_SAVE` URL action (`0x00001606`) for the Restricted Sites Zone (zone 4).

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1606
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1606

This setting controls the URLACTION_HTML_USERDATA_SAVE URL action (0x00001606) for the Restricted Sites Zone (zone 4). It determines whether content in that zone may persist information in browser history, favorites, an XML store, or directly within a web page saved to disk. When a persisted page is opened again, its previously stored state can be restored.

The value uses the REG_DWORD type. A value of 0 represents URLPOLICY_ALLOW and permits the operation without prompting. A value of 3 represents URLPOLICY_DISALLOW and blocks it. Microsoft also documents persistence as unavailable in the Restricted Sites Zone when the associated policy is not configured.

Notes

Security

Allowing this capability lets websites classified as restricted leave state on the computer across browser sessions and retrieve that state later. Untrusted content can consequently retain more information than the zone's default restriction permits.

This setting does not provide general file-system access or permission to modify arbitrary files. It affects only the persistence mechanisms governed by this Internet Explorer URL action. The legacy userData behavior additionally restricted access to a store to content using the same directory context and protocol.

Possible side effects

Blocking persistence can prevent legacy Internet Explorer web applications from retaining user preferences or other page state between sessions. Such applications may return to their initial state when reopened.

Notes

The setting applies only to content assigned to the Restricted Sites Zone. It does not generally control cookies, browser history, or modern web-storage mechanisms.

The underlying userData technology is an obsolete Internet Explorer feature. This policy is therefore primarily relevant to legacy content and applications that still use the Internet Explorer engine or its URL security architecture.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowUserDataPersistence

Microsoft Learn: URL Action Flags – URLACTION_HTML_USERDATA_SAVE

Microsoft Learn: URL Policy Flags

See also