Same origin policy
•
1 gefällt mir•1,442 views
The document discusses techniques for making cross-origin requests, including JSONP, CORS, and using Document.domain. JSONP works by dynamically inserting a <script> tag to load data via a JSON callback. CORS uses special request and response headers to allow cross-origin requests. Document.domain can make pages across different ports appear to be the same origin.
![Same origin policy(SOP) ,[object Object],[object Object],[object Object],Different host Failure http://otherapp.com/dir/other.html Different port Failure http://myapp.com:81/dir/etc.html Different protocol Failure https://myapp.com/secure.html Success http://myapp.com/dir/inner/another.html Success http://myapp.com/dir2/other.html Reason Outcome URL](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)