Sensitive Data in LocalStorage

Detects potential storage of sensitive credentials or JWTs directly in the browser's localStorage or sessionStorage.

zakirkun e6c6430 2 files · 1.0 KB Updated

File contents

Sensitive Data in LocalStorage

Overview

Detects potential storage of sensitive credentials or JWTs directly in the browser's localStorage or sessionStorage.

Remediation

Use HttpOnly/Secure cookies for session tokens. Local storage is easily accessible via any XSS vulnerability.

zakirkun/ice-tea/tree/main/skills/auth/local-storage-secrets commit e6c6430584

Frequently asked questions

npx skillmds@latest add zakirkun/sensitive-data-in-localstorage