Permission controller "origins" may encompass multiple distinct websites

[shanejonas]

For websites, permission controller "origins" are actually just the hostname components of the website URL. This means that websites that should be treated as distinct—for example, sites hosted on GitHub Pages or similar hosting services—are treated as the same subject by the permission system.