webbrowsersecuritysameoriginpolicyPart2 - browsersec - Browser Security Handbook, part 2 - Browser Security Handbook - Google Project Hosting
Part2 - browsersec - Browser Security Handbook, part 2 - Browser Security Handbook - Google Project Hosting code.google.com
Solid same-origin policy info and much, much more.