Skip to content
Web Storage: the lesser evil for session tokens
portswigger.net | research | #web-security | #cookies | #session-tokens | #localstorage | #web-storage
Summary
James Kettle argues Web Storage (sessionStorage/localStorage) is often a safer home for session tokens than cookies, examining the Secure flag, HttpOnly and the path attribute.
- Published
- Collected