Same-origin policy (SOP)
Whats SOP?
The same-origin policy restricts scripts on one origin from accessing data from another origin. An origin consists of a URI scheme, domain and port number. For example, consider the following URL:
http://normal-website.com/example/example.html
| URL accessed | Access permitted? |
|---|---|
| Yes: same scheme, domain, and port |
| Yes: same scheme, domain, and port |
| No: different scheme and port |
| No: different domain |
| No: different domain |
| No: different port* |
Last updated