Posts tagged: #xss

A practical look at JWT storage in browsers, XSS, CSRF, cookies, localStorage, service workers, and threat model tradeoffs.