Browser storage can present security concerns. Here we cover the options and look at the best practices that work together to keep your app secure.
Read more…
Brought for you by Eva Sarafianou
1 Like
Got any questions regarding the article?
1 Like
This topic was automatically closed 27 days after the last reply. New replies are no longer allowed.
Perhaps over-stressing the point, but all globals are vulnerable in the same manner as fetch in example #4.
> globalThis.Request = class BadRequest extends Request { constructor(...args) { super(...args); console.log('leaking secrets', args) } }
> const badRequest = new Request('https://foo.com?secret=xxxx')
[Log] leaking secrets – ["https://foo.com?secret=xxxx"] (1)