Is a browser mechanism which enables controlled access to resources located outside of a given domain. It also provides potential for cross domain attacks if this policy is poorly configured and implemented.