4 ms·
Assuming a single page js app: wouldn't storing a session token in localStorage, and appending as a header on every xhr request, solve some of these problems?
by sandstrom 14y ago
Assuming a single page js app: wouldn't storing a session token in localStorage, and appending as a header on every xhr request, solve some of these problems?
- homakov 14y agono, it will create only new, already solved. u cannot make localstorage httponly. if attacker steals it - session is lost..