Basic HTML version of Foils prepared April 7 1998

Foil 115 Same Origin Policy

From Basic Principles of Java and Internet Security CPS616 Web Technologies -- Spring 98. by Geoffrey C. Fox


When loading a document from one origin, a script loaded from a different origin cannot get or set certain predefined properties of certain browser and HTML objects in a window or frame.
Origin is defined as protocol://host, where host may include optional parts of URL including :port, part of an URL.
Any applets in the document are also subject to origin checks when calling JavaScript.
The same origin policy is the default policy since Netscape 2.
Properties subject to origin check



© Northeast Parallel Architectures Center, Syracuse University, npac@npac.syr.edu

If you have any comments about this server, send e-mail to webmaster@npac.syr.edu.

Page produced by wwwfoil on Sun Nov 29 1998