knowthen / Episode-9-Ditching-Cookies-for-JSON-Web-Tokens

Source for screencast: Ditching Cookies for JSON Web Tokens
http://knowthen.com/episode-9-ditching-cookies-for-json-web-tokens/
20 stars 2 forks source link

XSS Attacks and JWT #1

Open ghost opened 9 years ago

ghost commented 9 years ago

Hi! Thanks for the screencast and repository. I am not very familiar with dross-site scripting attacks, but as I would like to learn more about JWT is there anything JWT can help to protect you or decrease risk from possible XSS attacks?

Not to mention protecting against XSS attacks is fairly well understood and most frameworks offer protection from these attacks as a default behavior.

Can you cite some examples?