Okta ,XSS, tokenstorage

Hi, I am quite new to Okta and authentication.
And I can’t find enough information to answere this questions ( or I don’t understand them :pensive: ): where does okta store my tokens? how does okta protect me from XSS and XSRF? and what do i have to do to enable this?

Thank you very much for your help.