Same-Origin ↔ (policy) to block Web Page/Script to access Web Resource from different Origin
Source: developer.mozilla.org/en
Same-Origin policy to restrict access to requests of same origin only
References
"allow-same-origin"↔ to allow access for Same-Origin (within same parent iframe)