Working around same-origin policy The technique takes advantage of how the SOP typically functions in a browser, allowing cross-origin embedding and writing between two different origins and ...