Can the same-origin request policy be disabled in Microsoft Edge?

No. The concept of security zones is completely gone in Edge; it doesn't respect the Internet Options dialog from IE11 either. Edge has no command-line parameters (though it can be launched from the command line either with shell: followed by its app ID or with microsoft-edge: followed by the URL). The advanced options don't produce anything useful either.

However, there is a workaround, kind of: Edge has a few Group Policy settings. You can open the Local Group Policy Editor by running gpedit.msc if you don't have a domain. Navigate to the Configure the Enterprise Mode Site List policy (in Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft Edge). Sites you put in the "URI" box will be automatically opened in Internet Explorer 11 when you navigate to them in Edge. You can then, of course, configure security settings just as before.

This workaround is really quite sad, and I am always disappointed when rewrites of programs are missing huge chunks of configurability. As has been mentioned in the comments, it may be better to adjust (or even intercept and change via proxy, if you have to) the headers on the appropriate pages.


Edge now exposes experimental flags, including CORS functionality. Try typing edge:\\flags in the address bar, then searching for CORS. Making a change requires restarting the browser.