Web sites in less privileged web content zones must be disallowed to navigate into the Internet zone.

From Internet Explorer 9 Security Technical Implementation Guide

Part of DTBI515 - Less privileged web content - Internet

Associated with IA controls: ECSC-1

SV-40656r1_rule Web sites in less privileged web content zones must be disallowed to navigate into the Internet zone.

Vulnerability discussion

This policy setting allows you to manage whether web sites from less privileged zones, such as Restricted Sites, can navigate into this zone. If you enable this policy setting, web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur. If you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control. If you do not configure this policy setting, web sites from less privileged zones can open new windows in, or navigate into, this zone.

Check content

Fix text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> "Web sites in less privileged Web content zones can navigate into this zone" to “Enabled” and select "Disable" from the drop-down box.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.