WebSecureViz

Interactive Security Learning

Catalog
Web Security Visualizer
Step 115–20 minutes

Browser Security Foundations

Before diving into attacks, we must understand the trust boundaries that the web is built upon. The Same-Origin Policy (SOP) is the cornerstone of this model.

VISUALIZATION: SAME-ORIGIN POLICY
Origin A (bank.com)
User DataCookies, localStorage
Origin B (evil.com)
Malicious Script
A script on 'evil.com' tries to read data from 'bank.com'.

The Same-Origin Policy (SOP)

The SOP restricts how a document or script loaded from one origin can interact with a resource from another origin. An origin is defined by the protocol, port (if specified), and host.

Mastery Goals

Understand Same-Origin Policy, cookies, storage boundaries, and trust models

  • Same-Origin Policy
  • cookies and storage scope
  • trusted vs untrusted input

Ready to move on?

Mark this section as complete to track your progress through the curriculum.

Next Topic