Unverified50% confidenceCautionExact time
If the refresh token is placed in localStorage, an XSS occurrence is equivalent to account compromise.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen an Access Token expires, the client should automatically use the Refresh Token to obtain a new token; if the automatic refresh process fails, the application will silently lose access to cloud data.62% similarUnverifiedThe refresh token is a long-term credential used only to exchange for a new access token at the authentication endpoint, and it does not itself participate in business requests.60% similarUnverifiedSwitching compression algorithms, changing page settings, or default parameter changes after a library upgrade will cause Xet to treat the same data as a new file, and the first upload after an upgrade will be a full upload.55% similarUnverifiedIn the cache reuse mechanism, once the request prefix is modified, the cache for all content after it becomes invalid; modifying tools or other parts of the request will still affect reuse.54% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1009807API
curl https://kongchang.com/api/v1/knowledge/claims/1009807MCP
get_claim(id=1009807)