This repository has been archived by the owner on Nov 3, 2022. It is now read-only.

Data is stored in localstorage that shouldn't #11

Open

JakeThurman opened this issue May 11, 2019 · 0 comments

Assignees

Owner

JakeThurman commented May 11, 2019 •

edited

Loading

We should stop doing this.

This is not a huge issue, but it adds the potential for XSS attacks that we make easier.

We should either:

Encrypt them
Stop storing anything

I think encrypting them might be a good enough fix.

Motivating reason: Dr. Wolfe stopped using the plugin because of the risk.

JakeThurman assigned ianspryn

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.