same-origin-policy
Convenience or Catastrophe? The Dangers of AI Browsers No One is Talking AboutÂ
Bar Lanyado | | agent activity monitoring, agentic browser threats, AI agent risks, AI autonomy security, AI browser guardrails, AI browsers, AI-driven security risks, authenticated session risks, browser architectural flaws, Browser Security, cross-domain AI access, cross-origin reasoning, CSP limitations, intent validation, least privilege for AI agents, next-generation browser threats, open-source AI browser risks, prompt injection attacks, reasoning-based attacks, same-origin-policy, session isolation, sop, web security model
AI browsers introduce reasoning-based risks. Learn how cross-origin AI agents dismantle web security and what defenses are needed ...
Security Boulevard
Introducing the Same-origin Policy Whitepaper
Same-origin Policy (SOP) is a set of restrictions originally implemented by Netscape developers to help securely manage the relationships and connections between web resources such as HTML documents and other content, APIs ...
Exploiting Insecure crossdomain.xml to Bypass Same Origin Policy (ActionScript PoC)
Gursev Singh Kalra | | ActionScript, allow-access-from, bypass, crossdomain.xml, Exploit, flash, same-origin-policy
Adobe Flash is among the most popular browser plugins and also ships by default with a couple of popular web browsers. Its widespread prevalence has made it a frequent target of attacks ...
Defeating the Same Origin Policy: Part II
In my last post I gave details of how unsigned applets could bypass the same origin policy in order to make arbitrary network connections; the Sun alert for this issue is here ...
Defeating the Same Origin Policy: Part I
So last week Sun released updated versions of the Java Runtime Environment and with them, a host of Sun Alerts. These are neatly summarised on the Sun Security blog. Over the next ...

