Security Vulnerability: JWT token stored in localStorage

[Nithiesh-kumar]

Description

The frontend stores authentication tokens and user data in browser
localStorage. Since localStorage is accessible to JavaScript, this
creates a security risk if any XSS vulnerability exists.

Evidence

Token access is observed in the following files:

• frontend/src/services/api.js
• frontend/src/context/AuthContext.jsx

Example:

const token = localStorage.getItem('token');