ADMX Viewer
Microsoft.Policies.InternetExplorer• Both

Turn on Cross-Site Scripting Filter

This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone. If you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections. If you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.

Policy Details

Policy Name
IZ_PolicyTurnOnXSSFilter_Both_Restricted
Registry Key
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
Supported On
At least Internet Explorer 8.0
OMA-URI (CSP)
InternetExplorer/RestrictedSitesZoneEnableCrossSiteScriptingFilter
OS Build Version:10.0.16299
CSP Version:6.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Turn on Cross-Site Scripting (XSS) Filter

Type: enum

Allowed Values
  • 0 Enable
  • 3 Disable