Built-in security
JWt automatically protects against misuse by only allowing visible and enabled widgets to be interacted with.
This also helps to avoid CSRF attacks, which are doubly avoided because JWt does not store session information in cookies.
By using the widget abstraction, JWt discourages the inserting of raw HTML into a web page, preventing XSS attacks.
JWt also includes an authentication and registration system with support for OAuth
providers like Google, Facebook, and OpenID Connect.