Assertion: website's page | /r/CapableOf | bypass the same-origin policy
Facets:
Source sentences:
text: Since HTML <script> elements are allowed to retrieve and execute content from other domains, a page can bypass the same-origin policy and receive JSON data from a different domain by loading a resource that returns a JSONP payload.