Backup session persistance for cookie disablers

#1

Cookies are the only way I know to persist a session. I’ve heard localStorage isn’t safe against XSS. Is there any other way to do it for those who’ve disabled cookies?

#2