Sensitive Data in LocalStorage
Overview
Detects potential storage of sensitive credentials or JWTs directly in the browser's localStorage or sessionStorage.
Remediation
Use HttpOnly/Secure cookies for session tokens. Local storage is easily accessible via any XSS vulnerability.