A browser security rule that limits how a document or script can interact with resources from another origin.