🛡️ Free practice test question from: Same-Origin Policy (Security+)

The Same-Origin Policy considers three parts of a URL to determine origin:

> Protocol: (http:// or https://)

> Host: (The domain name)

> Port: (Usually 80 for http and 443 for https)

Following this, only URLs with the same protocol, host, and port as the original URL will be considered the same origin.

****

A) https://store.company.com:443/checkout: This shares the same protocol, host, and port (443 is the default for https), making it the same origin.

B) http://store.company.com/cart: This has a different protocol (http vs https), making it a different origin.

C) https://company.com/store/cart: This has a different host, making it a different origin.

D) https://store.company.com:8443/cart: This has a different port (8443 vs the default 443 for https), making it a different origin.