PortSwigger Research company blog

Web Storage: the lesser evil for session tokens

I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
Points
195
HN comments
69
Submissions
1
Cited by
4 commenters

Security & PrivacyWeb & Frontend2016

On Hacker News

SubmittedTitle on HNPointsComments
May 31, 2016Web Storage: the lesser evil for session tokens by kkl19569

Cited in comments

Linked from 4 Hacker News comments by 4 different people, from Jun 2016 to Jan 2018.

Most recent:

Search every comment that links here →

More from PortSwigger Research

All 3 posts →

Related posts from the same era