Policy
HTTP Allowlist
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that won't be upgraded to HTTPS. Organizations can use this policy to maintain access to servers that don't support HTTPS, without needing to disable "HttpsUpgradesEnabled". Supplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. Blanket host wildcards (that is, "*" or "[*]") aren't allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies. Note: This policy doesn't apply to HSTS upgrades. Example value: testserver.example.com [*.]example.org
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
HTTP Allowlist ID HttpAllowlistDesc | list | Path Software\Policies\Microsoft\Edge\WebView2\HttpAllowlist Value name User-defined names Type REG_SZ | List: explicit value |