DEV Community

Discussion on: Storing tokens in single-page applications

Collapse
 
miladr0 profile image
Milad Ranjbar

actually ur vulnerable to CSRF, if using the cookie with HTTP-only but u can use a package csurf to solve this problem.