Policy
Enable opaque origins for data URLs in Web Workers
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
This policy controls whether Web Workers created from data URLs are assigned a unique opaque origin. Web Workers can be created using a data URL that contains the worker script. Previously, these workers inherited the origin of the page that created them, which allowed them to access the same origin-bound data, such as local storage and cookies. Starting in Microsoft Edge version 149, Web Workers created from data URLs are assigned a unique opaque origin by default. This behavior improves security and aligns with the HTML specification by isolating these workers from the page that created them. If you enable this policy or don't configure it, Web Workers created from data URLs are assigned a unique opaque origin. If you disable this policy, Web Workers created from data URLs inherit the origin of the page that created them. Use this setting only as a temporary mitigation for compatibility issues with internal applications that depend on the legacy behavior. This policy is temporary and will be removed in Microsoft Edge version 157.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
Path Software\Policies\Microsoft\Edge Value name DataUrlInWebWorkerOpaqueOriginEnabled | REG_DWORD | HKLM 1 HKCU 1 | HKLM 0 HKCU 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.