What are the exceptions to SOP?
Sunday, 22 March 2026
by Jose Carvalho
The Same-Origin Policy (SOP) is a fundamental security concept implemented in web browsers to isolate documents and scripts loaded from different origins. Its primary purpose is to prevent malicious scripts on one page from obtaining access to sensitive data on another web page through the browser, thus mitigating threats such as cross-site scripting (XSS) and
- Published in Cybersecurity, EITC/IS/ACSS Advanced Computer Systems Security, Network security, Web security model
Tagged under:
Browser Security, CORS, CSP, CSRF, Cybersecurity, IFrame, JavaScript, SOP, Web Security, WebSockets, XSS

