same origin policy
s
  n
s
adsad
sdad
d
a
ddd
dadasd
adada
deny
ds