The Same Origin Policy (SOP) allows a browser to restrict access to resources
relating to one origin to being permitted only via other resources from that
same origin. (by default that is the behaviour configured in browsers)

This policy can be relaxed via the CORS and CSP policies.