What Should Never Go in Local Storage
localStorage is a plain-text drawer that any script on your page can open, that never expires, and that is not scoped to a tab. A short list of what must never go in it, and what to use instead.
Read article
பிறவிப் பெருங்கடல் நீந்துவர் நீந்தார்
இறைவன் அடிசேரா தார்
இறைவன் அடிசேரா தார்
Tag: web security
CSRF Tokens Explained by Breaking a Form First
CSRF is easier to understand as an attack than as a defence. Build the attack page first — it is nine lines — then the token makes obvious sense, and so does why SameSite cookies are not the whole answer.
Read article
