Whenever the browser requests some resource from a server, there are some validation rules that apply. For many of these interactions, which only ask for information and do not attempt to produce any kind of change in the server, there is no limitation, and the requests are always allowed, as in the following cases:
- CSS styles are required via a <link rel="stylesheet"> tag
- Images are required via an <img> tag
- JS code is required via a <script> tag
- Media requests via the <audio> or <media> tags
For other types of requests, the Same Origin Policy or Single Origin Policy (SOP) limits requests to those that are sent to the same origin (meaning the protocol, as in http://, host name, as in modernjsbook.com, and port, as in :8080), refusing any other request that doesn't match one or more of the origin URL elements. This...
