Why is it that when we link to a ja开发者_如何学编程vascript file on x.com from y.com (for example google analytics or jquery) it doesn\'t cause any cross domain security issues?
Why do b开发者_如何转开发rowsers apply the same origin policy to XMLHttpRequest? It\'s really inconvenient for developers, but it appears it does little in actually stopping hackers.