Same-Origin Policy

GPTKB entity

Statements (46)
Predicate Object
gptkbp:instanceOf web security policy
gptkbp:affects gptkb:Service_Workers
cookies
iframes
scripts
localStorage
sessionStorage
AJAX requests
gptkbp:appliesTo web browsers
gptkbp:category Web standards
Web security
Computer security
gptkbp:definedIn gptkb:Netscape
gptkbp:enforcedBy gptkb:Internet_Explorer
gptkb:Edge
gptkb:Safari
gptkb:Firefox
gptkb:Chrome
browser
client side
gptkbp:excludes gptkb:CORS
JSONP
postMessage
document.domain
window.name
https://www.w3.org/2000/01/rdf-schema#label Same-Origin Policy
gptkbp:introducedIn 1995
gptkbp:notEnforcedOn server side
gptkbp:originDefinition protocol, host, and port
gptkbp:prevention cross-origin access to DOM
cross-origin access to XMLHttpRequest
cross-origin access to cookies
cross-origin access to local storage
cross-site scripting attacks
data theft between sites
gptkbp:purpose restrict interactions between different origins
gptkbp:relatedTo gptkb:Content_Security_Policy
gptkb:Cross-Origin_Resource_Sharing
Web security
gptkbp:seeAlso gptkb:Content_Security_Policy
gptkb:Cross-Origin_Resource_Sharing
Web browser security
gptkbp:bfsParent gptkb:HTML_cross-origin_APIs
gptkb:CORS
gptkb:HTML_IFrame_Element
gptkbp:bfsLayer 5