Unverified50% confidenceTradeoffExact time
Tokens stored in memory are lost after a page refresh, but are more secure because XSS attacks cannot read them via document.cookie or localStorage
1
Sources
50%
Confidence
Long-term
Relevance
9/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedXSS (Cross-Site Scripting) is one of the most common vulnerabilities in web security, and attackers can steal cookies, session tokens, or other sensitive information by injecting malicious scripts.67% similarUnverifiedStored Cross-Site Scripting (Stored XSS) is persistent and propagating — attackers inject malicious scripts into a database or file system, and a single injection can affect all subsequent visitors.66% similarUnverifiedThe attack achieves persistence via registry key values, with the configuration using the string IMBotKing for symmetric encryption.64% similarUnverifiedIn an XML Signature Wrapping (XSW) attack, the attacker inserts a forged assertion into the document while preserving the original legitimate signature node, causing the verification logic to check the signed portion while the application logic uses the forged portion.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/944121API
curl https://kongchang.com/api/v1/knowledge/claims/944121MCP
get_claim(id=944121)