Report question

Question: How exactly is the same-domain policy enforced?