https://research.aurainfosec.io/authors/yangren-kelsang/Recent content in Yangren Kelsang on Aura Research DivisionHugo -- gohugo.ioenAura Information Security © 2026Thu, 04 Apr 2019 00:00:00 +0000https://research.aurainfosec.io/pentest/same-origin-policy/Thu, 04 Apr 2019 00:00:00 +0000https://research.aurainfosec.io/pentest/same-origin-policy/A web browser’s same origin policy plays a major role in preventing Cross-Site Request Forgery attacks. The standard is clear on what the acceptable behaviour is, but do all browsers follow it?