B blog.portswigger.net Web Storage: the lesser evil for session tokens 195 points kkl 10 years ago 69 comments