Cookies vs Localstorage for sessions – everything you need to know

Find conclusive answers and clarify common misonceptions. Can session cookies be attacked via XSS? Are 4kb cookies an issue?
Source: Codementor