Sensitive Data in LocalStorage

Detects potential storage of sensitive credentials or JWTs directly in the browser's localStorage or sessionStorage.

zakirkun Updated

File contents

Sensitive Data in LocalStorage

Overview

Detects potential storage of sensitive credentials or JWTs directly in the browser's localStorage or sessionStorage.

Remediation

Use HttpOnly/Secure cookies for session tokens. Local storage is easily accessible via any XSS vulnerability.

zakirkun/ice-tea/tree/main/skills/auth/local-storage-secrets commit e6c6430584

Frequently asked questions

npx skillmds@latest add zakirkun/sensitive-data-in-localstorage