What can I use instead of localStorage?
An alternative could also be localForage, a js library that provides the ease of use of localStorage with all the advanced features of IndexedDB….With HTML5 your local storage options are limited to the following:
- localStorage.
- cookies.
- Web SQL (in WebKit and Opera)
- IndexedDB (in all modern decent browsers)
Are there any security issues with HTML5 Local storage?
Let us now see some attacks possible with HTML5 local storage. Developers may store sensitive information in these databases. It is possible to find API keys or similar sensitive data when working with APIs due to their statelessness. We can exploit them using an XSS vulnerability if there is no physical access to the device.
How are encrypted data fetched from localStorage?
User visits a page that uses javascript to fetch encrypted data from localStorage and sends it to the server. Server decrypts encrypted data, gaining access to sensitive information for that request. My thinking is that that allows either the client or server to compromised, and things stay secure.
How to store and secure sensitive data in web applications?
How to Store and Secure Sensitive Data in Web Applications 1 Sensitive data in web applications. 2 Client-side Data storage. 3 Server-side Data storage. 4 Data Storage Devices. 5 Web application vulnerabilities that lead to sensitive data leakage. 6 Sensitive data protective measures and mechanisms.
Is there an expiration date for localStorage?
LocalStorage is an HTML5 web storage object for storing data on the client – that is, locally, on a user’s computer. Data stored locally has no expiration date and will exist until it’s been deleted. (In contrast, session storage, which is another HTML5 web storage API, deletes data stored when the browser closes.) Local storage is pure JavaScript.