Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Allow script-initiated windows without size or position constraints

This Internet Explorer security-zone policy determines whether scripted-window security restrictions apply to sites in the **Restricted Sites** zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2102
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2102

This Internet Explorer security-zone policy determines whether scripted-window security restrictions apply to sites in the Restricted Sites zone. The value name 2102 represents the URLACTION_FEATURE_WINDOW_RESTRICTIONS URL action.

The value uses the REG_DWORD type:

  • 0 (URLPOLICY_ALLOW) permits script-initiated windows without the additional size, position, and user-interface restrictions.
  • 3 (URLPOLICY_DISALLOW) makes the window restrictions effective. Windows can be constrained to the viewable desktop area, required to display a status bar, and prevented from using the size or position of chromeless pop-ups to cover important parent-window or system-dialog information.

This policy does not enable scripting or determine whether the pop-up blocker permits a window to open. It controls only the additional window restrictions for content in this security zone.

Notes

Security

A value of 0 removes a layer of protection from the Restricted Sites zone. Scripts can position or size windows in ways that obscure important content in a parent window or parts of system dialog boxes. This can make deceptive user interfaces and unintended user interaction easier.

A value of 3 allows the restrictions to protect against such window placement. Their actual application in a particular process also depends on the process-level FEATURE_WINDOW_RESTRICTIONS feature control.

Possible side effects

When the restrictions are active, legacy web applications that depend on dialog or pop-up windows with exact dimensions, positions, or hidden window elements might display differently. Windows can be repositioned, resized, or shown with additional user-interface elements.

Notes

The Zones\4 key applies only to the Restricted Sites zone. The HKLM and HKCU paths represent the computer and user policy scopes, respectively.

This setting belongs to the Internet Explorer URL security infrastructure. It does not define window behavior for browser engines or applications that do not evaluate this URL action.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowScriptInitiatedWindows

Microsoft Learn: URL Action Flags

Microsoft Learn: URL Policy Flags

See also