web-security technologies: same origin policy, cross-origin resource sharing, content-security policy