GitHub

Cookie , Local Storage, Session Storage

I. JWT + local storage -> XSS -> use httpOnly + secure(options cookies)

<img src="invalid_link" onerror="alert(localStorage.getItem('name'))">

II. JWT + Cookie -> CSRF -> use CORS

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
client		client
.gitignore		.gitignore
README.md		README.md
package.json		package.json
server.js		server.js
yarn.lock		yarn.lock