web application security

[vieridipaola]

Hi,

index.tsx contains:

if (window.location.hostname && window.location.hostname !== 'localhost') {
    alert('This application stores passwords in the local storage. This should not be done on a website.');

    throw new Error('Unsecure enviornment');
}

Does this mean it is risky to publish the js/html site on the Internet?
Does this mean it stores passwords in, eg., Firefox's "local storage" (F12 console)?
If so, can this be avoided and only set as a session variable?

Also, jsxc-single-page does not get along with Apache modsecurity. I keep getting XSS attack alerts, and the connections are being denied.

Any thoughts?