Skip to content

Commit b7240ed

Browse files
Fix: Use sessionStorage for GitHub credentials to fix security vulnerability
1 parent 4b4e5b3 commit b7240ed

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

src/hooks/useGitHubAuth.ts

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@ import { useState, useMemo, useEffect } from 'react';
22
import { Octokit } from '@octokit/core';
33

44
export const useGitHubAuth = () => {
5-
const [username, setUsername] = useState(() => localStorage.getItem('tracker_username') || '');
6-
const [token, setToken] = useState(() => localStorage.getItem('tracker_token') || '');
5+
const [username, setUsername] = useState(() => sessionStorage.getItem('tracker_username') || '');
6+
const [token, setToken] = useState(() => sessionStorage.getItem('tracker_token') || '');
77
const [error, setError] = useState('');
88

99
useEffect(() => {
10-
localStorage.setItem('tracker_username', username);
11-
localStorage.setItem('tracker_token', token);
10+
sessionStorage.setItem('tracker_username', username);
11+
sessionStorage.setItem('tracker_token', token);
1212
}, [username, token]);
1313

1414
const octokit = useMemo(() => {

0 commit comments

Comments
 (0)