title: Is it secure to store email and password in a component state for handling input values?
body: <p>I'm building a very big website project in ReactJS which handles money so I'm kinda paranoid when talking security.</p>
  
  <p>I have a Login component which has a state composed by "email" and "password". Those values are populated by typing in the corresponding input field. The actual login structure is very secure anyway because I'm using jwt with public and private key and a CSRF token.</p>
  
  <p>My problem is that I don't know how secure is to store email and password in the local state. Can it be easily accessible by cross-site scripting or can it only be visible by a React Chrome extension? From what I know, state should not be persistent. Can anyone solve my doubt?</p>
  
  <p>(please don't hate me for some English mistakes, I'm italian so "mamma mia pizzeria")</p>