Search

Lessons (1)

• Frontend Security

  … Where to store tokens? Storage XSS can steal it? CSRF risk? Verdict --- --- --- --- localStorage / sessionStorage ❌ Yes : any script can …