| 3 | | For the BC part, the fact that the passwords are being stored in plain text its obviously an advantage to implement anything because we can receive the password in plain text, check it in plain text without having to deal with nothing in particular during the first check, after that the tokenized hashes will do the thing. Anyway, with a XSS the cookie could be stolen anyway. AFAIK, I'm not too savvy on security topics, but anything-access-token could be stolen, including JWT are prone to XSS attacks. I feel that this falls more into `Security` than `Post/Posts Types` component, by the way. |
| | 3 | For the BC part, the fact that the passwords are being stored in plain text its obviously an advantage to implement anything because we can receive the password in plain text, check it in plain text without having to deal with nothing in particular during the first check, after that the tokenized hashes will do the thing. Anyway, with a XSS the cookie could be stolen anyway. AFAIK, I'm not too savvy on security topics, but anything-access-token could be stolen and is prone to XSS attacks. I feel that this falls more into `Security` than `Post/Posts Types` component, by the way. |