3 ms·These two come to mind for me: * Using URL origins * Not allowing any sort of host accessby msoad 4y agoThese two come to mind for me: * Using URL origins * Not allowing any sort of host access