Enable strict MIME type checking for worker scripts
This policy controls whether strict MIME type checking is used for worker scripts. If you enable or don't configure this policy, worker scripts use strict MIME type checking for JavaScript. Worker scripts that use legacy MIME types are rejected. If you disable this policy, worker scripts use lax MIME type checking. This allows worker scripts that use legacy MIME types, such as text/ascii, to continue to load and run. Browsers traditionally used lax MIME type checking, which allowed JavaScript resources to load with several legacy MIME types. This behavior can create security risks by allowing resources to load as scripts when they weren't intended to be used that way. Microsoft Edge uses strict MIME type checking by default. Enabling this policy follows the default behavior. Disabling this policy lets admins temporarily retain the legacy behavior for compatibility. For more information about JavaScript and ECMAScript media types, see https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguage.
Policy Details
- Policy Name
- StrictMimetypeCheckForWorkerScriptsEnabled
- Registry Key
- Software\Policies\Microsoft\Edge
- Value Name
- StrictMimetypeCheckForWorkerScriptsEnabled
- Supported On
- Microsoft Edge version 150, Windows 7 or later
- Policy State Values
- Enabled: 1Disabled: 0
- Available Languages
- en-us