Hi all
I am performing a security assessment of a web application that will be used mainly by users with Safari on iphones.
However, this webapp will use the HTML5 localstorage fucntionality to store confidential data into the mobile phone. So that if the mobile phone doesn't have an internet connection, the user can still "see" the website with some confidential information.
I have concerns however whether other applications installed on the iphone can read this space. May I ask you therefore if you are aware of any API, which is exposed by safari, that other apps can use to access the local storage space?
Are you also aware of any additional risk from a privacy point of view?
Thank you very much for the help