System Design Interview Preparation
Beginner to advanced, with interactive simulators and full design case studies.
Python Full-Stack Interview Preparation
Master backend + frontend questions with real-world cases.
AI/ML Engineer Interview Preparation
ML, deep learning, LLMs, RAG, MLOps and system design - with mock interviews.

Navigate by Range

JavaScript

Cookie vs localStorage

Cookies are sent automatically with matching requests and can be HttpOnly; localStorage is script-only and never transmitted.

The security trade is the answer: a token in localStorage is readable by any XSS; an HttpOnly cookie is not, but then needs CSRF protection.

A browser mechanism controlling whether script may read a cross-origin response.

Tricking a logged-in user's browser into making an unintended state-changing request.

This term is part of the free Python Full-Stack interview preparation module - browse the full glossary for every definition.

StackScholar is your go-to destination for exploring technology from every angle - from bit to supercomputer.

Occasional email when something substantial ships. No spam, unsubscribe anytime.

Website

Email address