Firebase React项目标记为“欺骗性站点”
我用Firebase托管部署了页面。
由于某种原因,我遇到了此安全错误:
用户可以从Firebase(注释,答复)中写入和读取数据,但可以' t当然会阅读用户收集的数据。有人有同样的问题吗?我该怎么办?
以下是: 实时网站 https:// Interactive-comment-comment-sect-sect-a2a31。 web.app/ github repo https://github.com/tr43om/texto
I deployed my page with firebase hosting.
For some reason, I get this safety error:
Users can write and read data from firebase (comments, replies), but can't of course read data for users collection. Did anyone have same problem? What can I do about it?
Here are links to:
live web site https://interactive-comment-sect-a2a31.web.app/
github repo https://github.com/tr43om/Texto
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
问题可能会导致以下任何原因导致:
来检测问题,使用Google使用Google。根据建议搜索和修复问题。
source
The issue could result with any of the following reason:
To detect issue, use google search console and fix the issue as per recommendation.
source
您的firebase API键开放,可以看到任何人。这意味着您的数据库可以随时被黑客入侵。我认为这可能是一个问题。尝试将键放入.env文件中。这将使您的应用程序更加安全。
Your Firebase API key is open to see anyone. It means your database can be hacked anytime. I think this can be an issue. Try to put your keys inside .env file. That will make your application more secure.