Same origin policy by default

Asked Nov 20 '21 at 12:34

Active Nov 20 '21 at 23:15

Viewed 25 times

If I have a <img> tag and with src of another origin, will it be blocked by the same-origin policy by default

edited Nov 20 '21 at 23:15

sideshowbarker

asked Nov 20 '21 at 12:34

VA1267

1

No: https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy#cross-origin_network_access – jub0bs Nov 20 '21 at 12:39
@jub0bs ok. What about xmlhttprequest with different url? – VA1267 Nov 20 '21 at 12:41
See the duplicate, in particular the section headed "Why you can display data in the page without reading it with JS". – Quentin Nov 20 '21 at 23:29

0 Answers0