AI engineering glossary · Web APIs HTTP
What is same-origin policy?
Same-origin policy: A browser security rule that stops scripts on a page from reading data from a different origin, where an origin is the combination of scheme, host and port. It protects users from malicious sites, and CORS is the controlled way to relax it.
Same-origin policy: an example
A script on evil.com cannot read your bank's pages open in another tab.
Related terms
More Web APIs HTTP terms
Where you learn it
Same-origin policy is part of the AI Engineering Program, which teaches it with notes, a hands-on lab and an exam. The first lesson is free.