Same origin policy Implementation?

Viewed 162

From my knowledge, the SOP is implemented on browser(client-side).

I was playing with console earlier, and i send a xmlhttprequest from wiki to reddit to retreive its json file.

x = new XMLHttprequest();
x.open("GET","any reddit page + .json");
x.send();
x.response;

Somehow it went through and i receive the data.

I tried this on different page, it blocked by SOP as i assumed. Now i'm confused.

Isn't SOP implemented by browser? how does the underlying SOP work?

I used chrome.

0 Answers
Related