News for hackers. Stuff that matters.
Re:CSRF, CORS, and HTTP Security Headers Demystified by goto11 on Friday April 30, 2021 @04:01AM (#26990861)
Cookies are sent with the first request, so the site can customize the response based on user ID. If the site uses local storage to identify the user , it will first have to send some bootstrap page which loads the id and sends it back. Much more cumbersome.

There are no comments on this comment yet.