Tag
cross-origin
- Sep 10, 2026 CORS Preflight, Credentials, and the Response Sharing Rules The request classifications that decide whether a preflight happens, what the OPTIONS exchange negotiates, and why credentialed CORS forbids the wildcard origin. web platform
- Jul 12, 2024 How the Same-Origin Policy Computes and Compares Origins The origin triple of scheme, host, and port, the opaque origins produced by sandboxing and data URLs, and which browser capabilities the policy actually gates. web platform
- Jul 13, 2023 Sandboxed Frames and the postMessage Trust Boundary Which capabilities the sandbox attribute strips and which tokens restore them, why allow-scripts with allow-same-origin defeats the frame, and how to validate a message without racing a navigation. web platform