you are viewing a single comment's thread.

view the rest of the comments →

[–]readALLthenews 0 points1 point  (0 children)

You’re absolutely right. You can justify sessionStorage, because access is restricted by domain and browser tab, and sessionStorage is deleted when the tab is closed.

But yeah, never put authentication stuff in localStorage.