New answers tagged


No, the Same Origin Policy also protects against: Cross domain manipulation in the DOM (e.g. a page manipulating another page from another origin loaded in an IFrame). The response from AJAX requests being read when the origins don't match. Images loaded from other origins from being read into an HTML5 canvas. So my question is: would we really need ...

Top 50 recent answers are included