Update article.md
A small grammar change and fixing a typo (I think) (no -> not).
This commit is contained in:
parent
f3e4ebb44c
commit
c6b6bc3c9c
1 changed files with 2 additions and 2 deletions
|
@ -107,7 +107,7 @@ That's for historical reasons.
|
|||
|
||||
There's a rule: scripts from one site can't access contents of the other site. So, e.g. a script at `https://facebook.com` can't read the user's mailbox at `https://gmail.com`.
|
||||
|
||||
Or, to be more precise, one origin (domain/port/protocol triplet) can't access the content from another one. So even if we have a subdomain, or just another port, these are different origins, no access to each other.
|
||||
Or, to be more precise, one origin (domain/port/protocol triplet) can't access the content from another one. So even if we have a subdomain, or just another port, these are different origins with no access to each other.
|
||||
|
||||
This rule also affects resources from other domains.
|
||||
|
||||
|
@ -159,7 +159,7 @@ Details may vary depending on the browser, but the idea is the same: any informa
|
|||
|
||||
Why do we need error details?
|
||||
|
||||
There are many services (and we can build our own) that listen for global errors using `window.onerror`, save errors and provide an interface to access and analyze them. That's great, as we can see real errors, triggered by our users. But if a script comes from another origin, then there's no much information about errors in it, as we've just seen.
|
||||
There are many services (and we can build our own) that listen for global errors using `window.onerror`, save errors and provide an interface to access and analyze them. That's great, as we can see real errors, triggered by our users. But if a script comes from another origin, then there's not much information about errors in it, as we've just seen.
|
||||
|
||||
Similar cross-origin policy (CORS) is enforced for other types of resources as well.
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue