Turn on Cross-Site Scripting Filter

Supported on: At least Internet Explorer 8.0

Registry

HKLM Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
HKCU Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2

Options

1409 enum
  • Enable -> 0
  • Disable -> 3

Description

This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. If you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections. If you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.