// GLOSSARY

Related-domain attacker

The attacker position that controls a subdomain sharing the victim's registrable domain. Because most browser protections are scoped to either the origin or the site, an attacker in this position sits inside both boundaries.