Policy
Turn off the XDomainRequest object
This policy setting allows you to choose whether websites can request data across domains by using the XDomainRequest object. Note that this policy setting does not block client-side communication across domains through other features in Internet Explorer 8, and it does not prevent a site from requesting cross-domain data through a server. If you enable this policy setting, websites cannot request data across domains by using the XDomainRequest object. If you disable or do not configure this policy setting, websites can request data across domains by using the XDomainRequest object.
2b7d0026fd70 IESF_DisableXDR Registry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST\iexplore.exe (enabled) = 0
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST\iexplore.exe (disabled) = 1HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST\iexplore.exe (enabled) = 0
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST\iexplore.exe (disabled) = 1Policy notes
This policy setting allows you to choose whether websites can request data across domains by using the XDomainRequest object. Note that this policy setting does not block client-side communication across domains through other features in Internet Explorer 8, and it does not prevent a site from requesting cross-domain data through a server. If you enable this policy setting, websites cannot request data across domains by using the XDomainRequest object. If you disable or do not configure this policy setting, websites can request data across domains by using the XDomainRequest object.