Insure By Design
Web Browser’s Local Storage
The local storage of the web browser is accessible by JavaScript with no way to restrict the path. Because of this, do not use Local Storage or Session Storage. If it’s too late and this is happening in an existing application, apply application-wide sanitization on anything trying to read it.