vlzsombor / Survey

1 stars 0 forks source link

CSRF defense #24

Open vlzsombor opened 3 years ago

vlzsombor commented 3 years ago

https://stackoverflow.com/questions/54258233/do-i-have-to-store-tokens-in-cookies-or-localstorage-or-session https://blog.logrocket.com/jwt-authentication-best-practices/#:~:text=To%20reiterate%2C%20whatever%20you%20do,JWTs%20inside%20an%20httpOnly%20cookie.

localstorage session storage is not safe