Remix.run Logo
panzi 13 hours ago

> - Your Discord session cookies and token could be stolen, leading to a complete account takeover.

Discord uses HttpOnly cookies (except for the cookie consent banner).

compootr 5 hours ago | parent [-]

tokens are stored in localStorage, which is accessible by JS