Turn off the XDomainRequest object

This policy setting allows you to choose whether websites can request data across domains by using the XDomainRequest object. Note that this policy setting does not block client-side communication across domains through other features in Internet Explorer 8, and it does not prevent a site from requesting cross-domain data through a server.

If you enable this policy setting, websites cannot request data across domains by using the XDomainRequest object.

If you disable or do not configure this policy setting, websites can request data across domains by using the XDomainRequest object.

Supported on: At least Internet Explorer 8.0
Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST
Value Nameiexplore.exe
Value TypeREG_DWORD
Enabled Value0
Disabled Value1

inetres.admx

Administrative Templates (Computers)

Administrative Templates (Users)