Tag
same-origin-policy
- Sep 20, 2026 Storage Partition Keys and the Origin Boundary How a browser derives the key that web storage is filed under, how scheme and port enter that key, and why partitioned third-party storage adds the top-level site. web platform
- Oct 22, 2025 How a Browser Computes an Origin, and Why Ports and Schemes Count The tuple comparison behind the same-origin policy, the opaque origins that never match anything, and the document.domain exceptions that weaken the rule. security
- Jul 12, 2024 How the Same-Origin Policy Computes and Compares Origins The origin triple of scheme, host, and port, the opaque origins produced by sandboxing and data URLs, and which browser capabilities the policy actually gates. web platform
- Jan 23, 2022 How Cookie Attributes Bound a Session Credential What the Domain, Path, Secure, HttpOnly, and SameSite attributes actually constrain, which of them are enforced by the browser versus the server, and where the scope model leaks. security