2022 Frontend security in 1 tweet:
1. Use HTTPs
2. Server render
3. Store JWT/token in 'secure', 'samesite', 'httponly' cookie (prevent XSS).
4. Declare content security policy (prevent XSS)
5. Regen cookies when user auths (prevent session fixation)
6. Set short cookie lifetime