Specifies whether to allow websites to make requests to any network endpoint in an insecure manner. (obsolete)
Jump to overview

Policy overview

Key metadata and intent for this policy.

Category
Microsoft Edge > Private Network Request Settings
Supported on
Microsoft Edge version 92-137, Windows 7 or later

Supported OS tags: Windows7

OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 137. Controls whether websites are allowed to make requests to more-private network endpoints. When this policy is enabled, all Private Network Access checks are disabled for all origins. This may allow attackers to perform cross-site request forgery (CSRF) attacks on private network servers. When this policy is disabled or not configured, the default behavior for requests to more-private network endpoints depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests, PrivateNetworkAccessSendPreflights, and PrivateNetworkAccessRespectPreflightResults feature flags. These flags may be controlled by experimentation or set via the command line. This policy relates to the Private Network Access specification. See https://wicg.github.io/private-network-access/ for more details. A network endpoint is more private than another if: 1) Its IP address is localhost and the other isn't. 2) Its IP address is private and the other is public. In the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost. When this policy enabled, websites are allowed to make requests to any network endpoint, subject to other cross-origin checks. This policy is obsolete. The previous blanket override has been replaced by the permission-based Local Network Access model, which blocks cross-space requests until users grant explicit consent.

Internal name
InsecurePrivateNetworkRequestsAllowed
Policy ID
d4695e425a4d
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Path
Software\Policies\Microsoft\Edge
Value name
InsecurePrivateNetworkRequestsAllowed
REG_DWORD
HKLM
1
HKCU
1
HKLM
0
HKCU
0
Registry location
Type REG_DWORD · Both
Path
Software\Policies\Microsoft\Edge
Value name
InsecurePrivateNetworkRequestsAllowed
Hive
HKLM
Enabled value
1
Disabled value
0
Hive
HKCU
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.