[Progress Communities] [Progress OpenEdge ABL] Forum Post: RE: JSDO session name works for Duplicate Tab and Refresh but not a decorated URL

  • Thread starter Thread starter egarcia
  • Start date Start date
Status
Not open for further replies.
E

egarcia

Guest
Hello, I do not think that changing sessionStorage to localStorage would be a good approach. The reason for using sessionStorage vs localStorage was from a security point of view to prevent unexpected malicious access (Cross Site Scripting) to the keys/values and prevent access from one session to another. See the following article for reference on "localStorage security": - www.owasp.org/.../HTML5_Security_Cheat_Sheet This article also explains that the sessionStorage is only available to a given window/tab: "Use the object sessionStorage instead of localStorage if persistent storage is not needed. sessionStorage object is available only to that window/tab until the window is closed." Perhaps, a possible approach would be doing something at the application level. A "Remember Me" function or something along those lines. I hope this helps. Thank you and regards.

Continue reading...
 
Status
Not open for further replies.
Back
Top