The default is the same origin policy. If you want to load other resources that are not in the same domain, you need to understand $sce and set up a whitelist This is a description from the official website
By default, the template URL is restricted to the same domain and protocol as the application document. This is done by calling $sce.getTrustedResourceUrl on it. To load templates from other domains or protocols you may either whitelist them or wrap them as trusted values. Refer to Angular's Strict Contextual Escaping.
The files introduced using ng-include must be under the same domain name, so what you want to achieve may need to find another way
The default is the same origin policy. If you want to load other resources that are not in the same domain, you need to understand $sce and set up a whitelist
This is a description from the official website