Skip to content

Topic

Security

Keys in the browser, missing RLS, open buckets. Ask before you ship.

39 posts

Replit agent deleted my .env when I asked it to clean up

replitdeploymentsecuritystuck-loop

asked 5 days ago by amara_v

Firebase rules let anyone read my whole users collection

windsurffirebasesecurityauth

asked 6 days ago by dana_ships

Supabase storage upload works for me, fails for other users with 403

windsurfsupabasesecurityapi

asked last week by dana_ships

ChatGPT suggested storing JWT in localStorage, is that bad?

chatgptauthsecurity

asked last week by kai_makes

How do I let users upload a profile picture without exposing my bucket?

replitsupabasesecurityapi

asked 3 weeks ago by kai_makes

Where do I put my OpenAI key in a Windsurf frontend app?

windsurfsecurityapi

asked 4 weeks ago by dana_ships

Is it safe to paste my database URL into Cursor's chat?

cursorsecuritydatabase

asked 4 weeks ago by rosa_m

Lovable app: users see each other's data after login

lovablesupabasesecurityauth

asked last month by noor_builds

Do I need a backend at all for a Lovable app with Supabase?

lovablesupabaseapisecurity

asked last month by noor_builds

ChatGPT wrote a scraper, now the site blocked my IP

chatgptapisecurity

asked last month by kai_makes

Windsurf generated an API without any auth, how do I add it afterwards?

windsurfapiauthsecurityfastapi

asked last month by dana_ships

Claude Code committed my .env.local to GitHub

claude-codesecuritydeployment

asked last month by sam_builds