related security models to same origin policy

Iy seems like there are some protocol security models that
are loosely related in intent to the "same origin policy" for
HTML scripting, but which different in detail.

The Adobe Flash cross-domain security policies:

http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html

and the Java applet security model, come to mind.

I don't know if these are worth citing in discussion. 

-- 
    Albert Lunde  albert-lunde@northwestern.edu
                  atlunde@panix.com  (new address for personal mail)