Concepts / Same-origin policy

Concept · short entry

Same-origin policy

Browser restrictions on scripts accessing data from a different origin: scheme, host and port. Cross-origin resource sharing (CORS) can allow some reads; sending a request is a separate question.

Taught in

This is a short entry. The lessons above are where the idea is taught with evidence and checks.