Turn off the XDomainRequest object
- Policy ID
- IESF_DisableXDR
- Scope
- Computer Configuration, User Configuration
- Supported on
- At least Internet Explorer 8.0
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Internet Explorer › Security Features › AJAX
Description
This policy setting allows you to choose whether websites can request data across domains by using the XDomainRequest object. Note that this policy setting does not block client-side communication across domains through other features in Internet Explorer 8, and it does not prevent a site from requesting cross-domain data through a server.
If you enable this policy setting, websites cannot request data across domains by using the XDomainRequest object.
If you disable or do not configure this policy setting, websites can request data across domains by using the XDomainRequest object.
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST View registry values
- iexplore.exeREG_DWORD
UserHKEY_CURRENT_USER
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST View registry values
- iexplore.exeREG_DWORD