A fundamental browser principle that restricts a script from one origin (a combination of domain, port, and protocol) from freely accessing resources on a different origin.
Commonly abbreviated SOP. This restriction is what prevents a malicious site from reading data from a banking site a user has open in another tab. When cross-origin access needs to be allowed intentionally, it requires configuring CORS.
© 2026 ITBGM