- \item Verify when parsing \JSON{} in browsers, that \text{JSON.parse} is
- used to parse \JSON{} on the client. Do not use \texttt{eval()} to
- parse \JSON{} on the client.
+ \end{result}
+
+ \item\pass{} Verify when parsing \JSON{} in browsers, that
+ \code{JSON.parse} is used to parse \JSON{} on the client. Do not use
+ \code{eval()} to parse \JSON{} on the client.
+
+ \begin{result}
+ There is no \JSON{} transfer outside the toolkits.
+ \end{result}
+
+ \item\pass{} Verify that authenticated data is cleared from client storage,
+ such as the browser DOM, after the session is terminated.
+
+ \begin{result}
+ No DOM storage is used.
+ \end{result}