News for hackers. Stuff that matters.
Re:Stop using JWT for sessions (2016) by deathanatos on Thursday November 01, 2018 @10:51AM (#18354400)
https://portswigger.net/blog/web-storage-the-lesser-evil-for...

(It not only explains what others have said about httpOnly, but it also goes more in depth on the tradeoffs between the two.)

There are no comments on this comment yet.