A brief overview of same-origin policy

Sept. 10, 2017 1 comment www.securitylearn.net Management

Same-Origin Policy permits scripts running on pages originating from the ‘same site’ or ‘same origin’ to access each other’s DOM with no specific restrictions, but prevents access to DOM on different sites. So the how does browser identify whether the script and the page are from ‘same origin’ or not? The origin is calculated based on the combination of scheme, host and port.


negrii_irina88 8 months, 1 week ago

So significant for modern web applications ...it is an important security cornerstone