Turn off the XDomainRequest Object

The XDomainRequest Object allows Web sites to request data across domains from your browser. This policy setting allows you to chose whether Web sites will be able to request data across domains using the XDomainRequest object. Please note this setting does not block client-side communication across domains using other features in Internet Explorer 8 and also does not prevent a site from requesting cross domain data through a server.

If you enable this policy setting, Web sites will not be able to request data across domains using XDomainRequest object.

If you disable or do not configure this policy setting, Web sites will be able to request data across domains using XDomainRequest object.

Supported on: At least Internet Explorer 8.0

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST
Value Nameiexplore.exe
Value TypeREG_DWORD
Enabled Value0
Disabled Value1

inetres.admx

Administrative Templates (Computers)

Administrative Templates (Users)