SOP vs CORS code example

Example: cors vs csp

CORS manages what sites can read a site's data. 

CSP prevents a site from code injection. Many layers for the many possible ways.