

동일한 출처에 대한 정책 = 동일한 출처에서만 리소스를 공유할 수 있다는 정책.
웹 브라우저는 첫 번째 웹 페이지에 포함된 스크립트가 두 번째 웹 페이지의 데이터에 액세스하도록 허용하지만 두 웹 페이지 모두 동일한 출처를 가져야 한다.
| Compared URL | Outcome | Reason |
|---|---|---|
| http://www.example.com/dir/page2.html | Success | Same scheme, host and port |
| http://www.example.com/dir2/other.html | Success | Same scheme, host and port |
| **http://**username:password@www.example.com/dir2/other.html | Success | Same scheme, host and port |
| http://www.example.com:80/dir/other.html | Success | Most modern browsers implicitly assign the protocol's default port when omitted.[6][7] |
| http://www.example.com:81/dir/other.html | Failure | Same scheme and host but different port |
| https://www.example.com/dir/other.html | Failure | Different scheme |
| http://en.example.com/dir/other.html | Failure | Different host |
| http://example.com/dir/other.html | Failure | Different host (exact match required) |
| http://v2.www.example.com/dir/other.html | Failure | Different host (exact match required) |
| data:image/gif;base64,R0lGODlhAQABAAAAACwAAAAAAQABAAA= | Failure | Different scheme |

Allow CORS: Access-Control-Allow-Origin - Chrome Web Store