Questions tagged [local-storage]
55 questions
0
votes
0 answers
Should you even bother trying to hide authentication from XSS?
I read a comment on here that goes something like "trying to hide user authentication from an XSS attack is like reinforcing your fridge against a nuclear bomb; at that point, you've got much bigger problems to worry about, and nothing you reinforce…
![](../../users/profiles/243849.webp)
Roy He
- 1
0
votes
1 answer
Is storing a short lived JWT on initial login in LocalStorage safe?
I was reading this question and still have doubts about my use case.
I know it's unsafe to store a JWT in local/session storage due to XSS attacks. But what if it's for a JWT that only lasts 1 min when they first login? The client would then use…
![](../../users/profiles/240722.webp)
tbd_
- 101
- 1
0
votes
0 answers
Ionic local storage store sensitive data for private app
I'm new to the ionic framework and have some basics of it and currently I'm developing a private app for my family only that store some sensitive information in the localstorage. I used some crypto libraries to encrypt the whole data to prevent…
![](../../users/profiles/234482.webp)
hacek
- 1
0
votes
1 answer
Storing encrypted tokens in LocalStorage
I am building a JavaScript application that will run in a web browser but also as a pseudo-native mobile application via Apache Cordova. It communicates via API to a separate backend service.
The app requires that the user be prompted for some kind…
![](../../users/profiles/218725.webp)
oogles
- 101
- 2
0
votes
1 answer
localStorage vs. HTTP-Only Cookies + XSRF: Is either better when it comes to XSS?
If I were to implement a common OpenID Connection pattern on a SPA, I might have the following relationship:
Auth server <-----------> Client (browser) <-----------> App API server
The user would be redirected to the auth server to login, and an…
![](../../users/profiles/165057.webp)
M Miller
- 153
- 1
- 4
0
votes
1 answer
Store password in Chrome exclusively online
I have read about the functioning of Chrome for storing passwords. I realized that it stores an encrypted sql database locally and it also stores them online. I find it more secure to have them only online.
Is there a way to store them exclusively…
![](../../users/profiles/151266.webp)
KB303
- 423
- 2
- 5
- 15
0
votes
1 answer
Can I store secrets in localStorage? Will malware have access to it?
If a Windows user downloaded and ran a pirated computer game that contained malware and is granted administrative privileges, will it have access to localStorage or browser cookies?
![](../../users/profiles/146226.webp)
golopot
- 109
- 1
0
votes
0 answers
Is keeping business data in browser database websql secure?
Knowing that
Server always validates the data before saving it.
Browser app is generating the data based on user input and some business logic and is storing it locally.
Browser app then synchronize with server to save locally generated data and…
![](../../users/profiles/27398.webp)
gurvinder372
- 823
- 2
- 8
- 9
-1
votes
1 answer
How can MyKi transfer data from iOS to macOS without a server?
MyKi.co claims to be able to transfer your passwords securely from your iOS device to the macOS without having to relay through their own servers. But how is this possible?
"Your sensitive data is not stored in the cloud." -> https://myki.co/faq
It…
![](../../users/profiles/157775.webp)
FooBar
- 139
- 5
-3
votes
1 answer
What led to the prominence of storing JWTs in localstorage?
Could somebody explain how and why a majority of new webapps are storing their JWTs/tokens in localStorage? It doesn't seem to be by chance, anyone familiar with this history and perhaps factors from the industry that lead to this. This is just a…
![](../../users/profiles/147210.webp)
jia chen
- 149
- 4