News for hackers. Stuff that matters.
Re:Stop using JWT for sessions (2016) by ATsch on Thursday November 01, 2018 @10:43AM (#18354319)
> You can access cookies from Javascript, so how is localstorage worse?

You can access it via JS only if you don't set the httpOnly flag on the cookie.

There are no comments on this comment yet.