News for hackers. Stuff that matters.
Re:CSRF, CORS, and HTTP Security Headers Demystified by livre on Thursday April 29, 2021 @07:21PM (#26988080)
Cookies work when JavaScript is disabled or has failed to load (your basic functionality should work without it), localStorage doesn't. So unless we are talking about SPAs cookies are generally the better choice.

There are no comments on this comment yet.