SOP & CORS
XSS & CSRF