Same-origin policy

The browser rule that stops a page from reading responses from another origin unless that server allows it through CORS.