Cross-Origin
Cross-origin refers to any origin differing in protocol, host, or port; the same-origin policy restricts cross-origin script interoperation.
Purpose
To understand the cross-origin boundary and same-origin policy restrictions, the foundation of Web security and CORS/COEP/COOP.
Mechanism
Origin = (protocol, host, port). Cross-origin scripts cannot read or write another origin DOM/cookies/storage; they can send cross-origin requests but reading responses is restricted by CORS. img/script/link can load cross-origin but with restricted reads.
Use cases
- Web security foundation
- CORS understanding
- Cross-origin isolation
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL