Re:CSRF, CORS, and HTTP Security Headers Demystified
by goto11 on Friday April 30, 2021 @04:01AM
(#26990861)
Cookies are sent with the first request, so the site can customize the response based on user ID. If the site uses local storage to identify the user , it will first have to send some bootstrap page which loads the id and sends it back. Much more cumbersome.
[ Parent
| on HN ]
There are no comments on this comment yet.