Top "Same-origin-policy" questions

The same origin policy, which is enforced by Web browsers, limits JavaScript in a document loaded from one origin from accessing data from another origin.

How to enable CORS on Firefox?

Can somebody please tell me how I allow CORS on firefox? I easily managed it on Chrome and IE, but …

firefox cors same-origin-policy
Disabling same-origin policy in Safari

For development purposes, I need to disable the same-origin policy in Safari (on Windows) on my machine. In Chrome, this …

safari cross-domain same-origin-policy
Google Chrome --allow-file-access-from-files disabled for Chrome Beta 8

I have been developing an AJAX application using jQuery and Microsoft Seadragon technology. I need to have access to the …

ajax file google-chrome local same-origin-policy
How to disable same origin policy Internet Explorer

Chrome allows us to disable the same origin policy, so we can test cross origin requests. I would like to …

internet-explorer same-origin-policy websecurity
Using iframe with local files in Chrome

I am having a tough time figuring out how to access a page loaded in an iframe from the outer …

javascript google-chrome iframe same-origin-policy appjs
Trying to disable Chrome same origin policy

I'm trying to follow a melonJS tutorial. It says I should disable cross-origin request using one of two methods: --disable-web-security …

javascript security google-chrome same-origin-policy
Access-Control-Allow-Origin: "*" not allowed when credentials flag is true, but there is no Access-Control-Allow-Credentials header

Suddenly, seemingly without changing anything in my web app, I started getting CORS errors when opening it in Chrome. I …

xmlhttprequest cors same-origin-policy
The `--disable-web-security` command is seems no longer working

The command --disable-web-security to allow for cross domain requests on Chrome is no longer working, I presume due to the …

security google-chrome same-origin-policy
Origin evil.com in Request Header

I am trying to send form data to a webservice but below "Request Header" in the "Network" of the Chrome …

web-services google-chrome header same-origin-policy referer
WebView Javascript cross domain from a local HTML file

I load a local html file (from assets folder) to the app WebView. In the HTML I run a jQuery.…

javascript android cross-domain android-webview same-origin-policy