Fix GitHub Token Storage Vulnerability in Signup Page

[m20arcusk]

Summary

This PR addresses a critical security vulnerability related to the storage of GitHub access tokens in localStorage, which is susceptible to XSS attacks.

Security Vulnerabilities Fixed

• Location: Line 30
  • Issue: GitHub access token stored in localStorage
  • Fix: Implemented a secure cookie approach for token storage

Changes Made

• Replaced localStorage usage with a secure cookie mechanism for storing GitHub access tokens.
• Added comments to explain the security fix and its implementation.

Testing Recommendations

• Test GitHub OAuth login to ensure tokens are stored securely in cookies.
• Verify that no tokens are stored in localStorage.
• Check that the application functions correctly after the changes.

Potential Shortcomings

• The secure cookie implementation assumes server-side support for setting cookies.

Security Impact

• Before: Tokens stored in localStorage, vulnerable to XSS.
• After: Tokens stored in secure cookies, mitigating XSS risks.

---

🤖 Auto-generated security fix | Analyzed 1 vulnerabilities | Please review carefully before merging

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
trojan	Error		Jan 18, 2026 6:11pm