Is it safe to store the token in the browser's Session Storage?

Question

JSON Web Token

Is it safe to store JWT Token in Session Storage and not HttpOnly Cookie?

Answer 1

The HttpOnly Cookie is available only to the server that is accessible by the domain that is registered in this cookie and no one else.
Storage is available to any script on the page. Accordingly, the contents of Storage can steal any script connected from the outside.