History of Same-origin policy

Markup fix

data URLs do no longer inherit the security context. This is detailed on MDN page '/en-US/docs/Web/HTTP/data_URIs#Security' from which the wording has been adopted.

Clarify the "Changing origin" section to note that changing one document.domain is not enough to pass cross origin checks