I3 - source and sink

Sensitive client-side storage access

Browser storage access. Relevant both because it may expose sensitive values to JavaScript and because stored values can later influence behaviour.