Cross-Site Script Inclusion

Only the followings URLs are considered to have the same origin as https://www.example.com:

URLSame Origin?
https://www.example.com/profileYes - the protocol, domain and port match, even though the path is different
http://www.example.comNo - the protocol differs
https://www.anotherwebsite.comNo - the domain differs
https://www.example.com:8080No - the port differs