Oh, great: There's a new Same Origin Policy exploit for Edge

Browser helps attackers by autocompleting passwords

Edge nemesis, security tester Manuel Caballero from Buenos Aires, has popped the browser again, getting around its Same Origin Policy to steal stored credentials."