DataUrlInWebWorkerOpaqueOriginEnabled

Enable opaque origins for data URLs in Web Workers

Supported versions

  • Windows: ≥ 149
  • macOS: ≥ 149
  • Android: ≥ 149
  • iOS: Not supported

Description

This policy controls whether Web Workers created from data URLs are assigned a unique opaque origin.

Web Workers can be created using a data URL that contains the worker script. Previously, these workers inherited the origin of the page that created them, which allowed them to access the same origin-bound data, such as local storage and cookies.

Starting in Microsoft Edge version 149, Web Workers created from data URLs are assigned a unique opaque origin by default. This behavior improves security and aligns with the HTML specification by isolating these workers from the page that created them.

If you enable this policy or don't configure it, Web Workers created from data URLs are assigned a unique opaque origin.

If you disable this policy, Web Workers created from data URLs inherit the origin of the page that created them. Use this setting only as a temporary mitigation for compatibility issues with internal applications that depend on the legacy behavior.

This policy is temporary and will be removed in Microsoft Edge version 157.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • Boolean

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: DataUrlInWebWorkerOpaqueOriginEnabled
  • GP name: Enable opaque origins for data URLs in Web Workers
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

Disabled

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: DataUrlInWebWorkerOpaqueOriginEnabled
  • Value type: REG_DWORD

Example registry value

0x00000000

Mac information and settings

  • Preference Key name: DataUrlInWebWorkerOpaqueOriginEnabled
  • Example value:
<false/>

Android information and settings

  • Preference Key name: DataUrlInWebWorkerOpaqueOriginEnabled
  • Example value:
false

See also

  • Last updated on