Pankaj Mouriya.
GitHubLinkedIn
Search writing ⌘ K

The Same Origin Policy / Chapter 09 of 14

Same Origin Policy to JavaScript

Same Origin Policy to JavaScript in Pankaj Mouriya's Same Origin Policy guide.

All chapters ↘
  1. 01 / Introduction
  2. 02 / What should be Allowed?
  3. 03 / Same Origin Policy
  4. 04 / Access Different Orgins
  5. 05 / Same Origin Policy in Tabs
  6. 06 / Same Origin Policy to Anchors
  7. 07 / Same Origin Policy to Forms
  8. 08 / Same Origin Policy to Images and CSS
  9. 09 / Same Origin Policy to JavaScript
  10. 10 / Same Origin Policy to Web Storage
  11. 11 / Same Origin Policy to Cookies
  12. 12 / Getting Around Same Origin Policy
  13. 13 / postMessage API Implementation and limitations
  14. 14 / References
  • One website can include JavaScript from any other website
Code
<script src="https://siteb.com/file.js">
Same Origin Policy to JavaScript, figure 1
Same Origin Policy to JavaScript, figure 2

Embedding other website JavaScript, you are allowing other website to run its JavaScript into your website. This can lead to JavaScript realated attacks such as Cross Site Scripting.