The same-origin policy is the browser's security policy and is not part of the HTTP protocol.
When calling the HTTP interface on the server side, it only uses the HTTP protocol and does not execute JS scripts. There is no need for a same-origin policy, so there is no cross-over problem.
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
The same-origin policy is the browser's security policy and is not part of the HTTP protocol.
When calling the HTTP interface on the server side, it only uses the HTTP protocol and does not execute JS scripts. There is no need for a same-origin policy, so there is no cross-over problem.
Why is there cross-domain? It is the security policy of the browser. Without the browser, there would be no cross-domain.
Cross-domain is originally the same origin strategy of js