Assertion: script | /r/CapableOf | pass the cors validation
Facets:
Source sentences:
text: The same-origin policy, enforced by modern browsers, means that scripts only have full access rights if they are loaded from the same origin domain as the original document—when the script passes the CORS validation.