Web Security · Junior · Question 38 of 75
What does the same-origin policy stop?
- 1A page from sending any request to another domain
- ✓Correct answer: A page from one origin reading responses and DOM of another origin
- 3Loading images from a CDN
Explanation
Cross-origin images, scripts and form submissions are allowed. What's blocked by default is reading the response, such as the body of a fetch to another origin.