If you do not set this property, default value true is used. When this option is enabled, the browser enforce same-origin policy. For example, it does not allow JavaScript code from one site to access contents of a page from another site. This is a major security measure thus all modern browsers enforce this policy by default.