Turn on Cross-Site Scripting Filter

This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.If you enable this policy setting the XSS Filter is turned on for sites in this zone and the XSS Filter attempts to block cross-site script injections.If you disable this policy setting the XSS Filter is turned off for sites in this zone and Internet Explorer permits cross-site script injections.

Policy path: 

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Scope: 

User

Supported on: 

At least Internet Explorer 8.0

Registry settings: 

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1409

Filename: 

inetres.admx

Related content