HTML5 Web Storage Security Risks: Safeguarding localStorage and sessionStorage
You ship a login flow, stash the session token in localStorage because it survives refreshes, and move on. It works. Then
You ship a login flow, stash the session token in localStorage because it survives refreshes, and move on. It works. Then