Origin (Web)

web security

Definition

Origin (Web)

An origin is the triple

$$⟨\text{scheme},\text{host},\text{port}⟩.$$

Two URLs share an origin precisely when all three components match. https://evil.com and https://bank.com are therefore different origins even though both use HTTPS, and http://test.tuwien.ac.at:8080 differs from https://test.tuwien.ac.at in scheme and port. The origin is the unit on which the Same-Origin Policy operates.