Cross-Site Script Inclusion

Browsers keep the user secure by implementing the same-origin policy: two pages are allowed to interact with each other if they are hosted at the same origin. That is, if they are loaded from the same web-domain, port and protocol.

Only the followings URLs are considered to have the same origin as https://www.example.com:

URL	Same Origin?
`https://www.example.com/profile`	Yes - the protocol, domain and port match, even though the path is different
`http://www.example.com`	No - the protocol differs
`https://www.anotherwebsite.com`	No - the domain differs
`https://www.example.com:8080`	No - the port differs