I know the same origin policy prevents javascript on other sites from sending requests to my domain, but does the same origin policy also protect me from third party scripts loa