3 ms·
Isn't the same origin policy per domain? I suppose it's a security benefit that students can't xss each other.
by charleslmunger 10y ago
Isn't the same origin policy per domain? I suppose it's a security benefit that students can't xss each other.
- hdhzy 10y agoYes, exactly. At least until suborigin header [0] becomes widely supported. [0]: https://w3c.github.io/webappsec-suborigins/ https://w3c.github.io/webappsec-suborigins/