Is storing login password in localStorage in SPA with all JS scripts hosted in the same server...

Is storing login username and password in localStorage in SPA with all JS scripts hosted in the same server OK for security?

I have an Angular SPA app with all app scripts and 3rd party scripts hosted on the same server. For automatically and silently login again after the JWT access token expires and the refresh token expires, I store the username and password in LocalStorage.

Is the app secured from attacks by cross site scripting?

Continue reading...