Basic HTML version of Foils prepared April 7 1998

Foil 115 Same Origin Policy

From Basic Principles of Java and Internet Security CPS616 Web Technologies -- Spring 98. by Geoffrey C. Fox
1 When loading a document from one origin, a script loaded from a different origin cannot get or set certain predefined properties of certain browser and HTML objects in a window or frame.
2 Origin is defined as protocol://host, where host may include optional parts of URL including :port, part of an URL.
3 Any applets in the document are also subject to origin checks when calling JavaScript.
4 The same origin policy is the default policy since Netscape 2.
5 Properties subject to origin check
in Table To:

© Northeast Parallel Architectures Center, Syracuse University, npac@npac.syr.edu

If you have any comments about this server, send e-mail to webmaster@npac.syr.edu.

Page produced by wwwfoil on Mon Apr 6 1998