Why is the HTML SCRIPT tag not subject to the same origin policy
问题 I am asking this questions because we will develop an application that is supposed to share cross origin data via javascript. One possible solution seems JSONP as it uses SCRIPT tags pull data from other domains. However, I would like to avoid the situation that we implement our awesome code on the assumption that the SCRIPT tag is not subject to sop and at some point browsers prohibit this functionality. Can anybody shed some light on what is the reason for the SCRIPT tag to allow cross