[Firebase] Your Realtime Database 'xxxxx' has insecure rules

Jyotishgher Astrology
By -
0

 

[Firebase] Your Realtime Database 'xxxxx' has insecure rules


We've detected the following issue(s) with your security rules:
  • any user can read your entire database
  • any user can write to your entire database
Without strong security rules, anyone who has the address of your database can read / write to it, leaving your data vulnerable to attackers stealing, modifying, or deleting data as well as creating costly operations.

Solutions Do this in firebase Store :

Previously It was like :
rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write;
    }
  }
}

After Rule Apply here it means everyone hase to login then only can access the firestore
rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write: if request.auth !=null;
    }
  }
}

Post a Comment

0Comments

Post a Comment (0)