Same-Origin Policy
A core mechanism of the browser security model that stipulates only requests sharing the same protocol, domain, and port are treated as same-origin. It prevents malicious websites from accessing resources hosted under different origins.
Timeline (last 90 days)
The same-origin policy is the premise for CORS's existence: by default the browser forbids scripts from one origin to read responses from another origin, and CORS is a protocol-layer mechanism by which the server declares that it is willing to be accessed cross-origin.
The browser same-origin policy states that each web page's origin consists of protocol, domain, and port, and browsers by default prohibit scripts from one origin from reading or manipulating data from another origin.
The technical community has proposed drawing on the same-origin policy concept from browser security models to establish domain-level access isolation for agents
localStorage 遵循同源策略，即同协议、同域名、同端口下的页面共享同一存储空间
All Facts (4)
The same-origin policy is the premise for CORS's existence: by default the browser forbids scripts from one origin to read responses from another origin, and CORS is a protocol-layer mechanism by which the server declares that it is willing to be accessed cross-origin.
50%UnverifiedThe browser same-origin policy states that each web page's origin consists of protocol, domain, and port, and browsers by default prohibit scripts from one origin from reading or manipulating data from another origin.
50%UnverifiedThe technical community has proposed drawing on the same-origin policy concept from browser security models to establish domain-level access isolation for agents
50%UnverifiedlocalStorage 遵循同源策略，即同协议、同域名、同端口下的页面共享同一存储空间
50%