Top "Same-origin-policy" questions

The same origin policy, which is enforced by Web browsers, limits JavaScript in a document loaded from one origin from accessing data from another origin.

SECURITY_ERR: DOM Exception 18 when applying document.domain on both sites. How do I resolve this?

I have a page at an internal server, server1.mydomain.com/page.jsp and another page at a different internal …

javascript cross-domain user-agent same-origin-policy domexception
Chrome Extension: how to change origin in AJAX request header?

I'm trying to manually set an origin in an ajax request header. In my background.js, I have this var …

javascript ajax google-chrome-extension cross-domain same-origin-policy
IFRAME sandbox attribute is blocking AJAX calls

I have an application (http://localhost/MyApp), where some of the parts are rendered through IFRAMES. These iframed parts has …

ajax html iframe sandbox same-origin-policy
window.name as a data transport: a valid approach?

Overview and original question window.name is an interesting beast. MDN's description hints at the original intent: The name of …

javascript same-origin-policy
Same origin host, different ports in JS

for the two hosts http://1.com.local/ http://2.com.local:8080/ how can I use document.domain to enable DOM-Manipulation between …

javascript dom same-origin-policy
Cross site scripting attacks and same origin policy

I am familiar with the persistent and non-persistent XSS. I also know about Same origin policy that prevents/restricts requests …

xss same-origin-policy
Canvas.toDataURL() working in all browsers except IE10

I'm working on a project that uses a canvas to automatically crop an image, then return its data URL. It …

canvas internet-explorer-10 cors same-origin-policy
Is there a way to bypass Javascript / jQuery's same origin policy for local access?

Trying to use ajax, getJSON, and functions like that to fetch an external URL from a local (non-server) development computer. …

javascript jquery same-origin-policy
Same Origin Policy - AJAX & using Public APIs

I know if on my own webpage, if my user is on : http://www.example.com/form.php and I …

javascript ajax xmlhttprequest same-origin-policy
HTML5 Canvas getImageData and Same Origin Policy

I have a site running at pixie.strd6.com and images hosted through Amazon S3 with a CNAME for images.…

html canvas subdomain same-origin-policy