Concepts / Same-origin policy
Concept · short entry
Same-origin policy
Browser restrictions on scripts accessing data from a different origin: scheme, host and port. Cross-origin resource sharing (CORS) can allow some reads; sending a request is a separate question.
Taught in
- Same-origin policy 06 · Web basics
- CORS 09 · Web security
This is a short entry. The lessons above are where the idea is taught with evidence and checks.