This pull request updates the session storage mechanism for chat sessions to improve security and user experience, and enhances frontend security documentation. The most important changes are:

Session Storage Update:

• Changed chat session ID storage from localStorage to sessionStorage in both the frontend logic (app.js) and documentation. This means chat sessions now persist only while the browser tab is open, improving security by clearing sessions when the tab is closed, but still allowing session persistence across page reloads. [1] [2]

Security Documentation Improvements:

• Expanded the security section in the README.md to clarify that all AI-generated Markdown is sanitized with DOMPurify, and added that Subresource Integrity (SRI) is used to ensure external CDN resources are not tampered with.…is to clear session data when tab is closed

Update README.md

Summary by CodeRabbit

• Changes

  • Session persistence mechanism updated to use session-scoped storage. Sessions will now persist across page refreshes within the same browser session but will be cleared when the browser is closed.

• Documentation

  • Security practices documentation expanded to cover content sanitization and external dependency verification methods.