build1 publisher
Lovable's security scanner clears an RLS policy that returns every customer's orders
A Row Level Security policy can pass Lovable's scanner, restrict itself to authenticated users, join a membership table, and still hand every order in the database to anyone who signs up. Two SQL queries find it.
Publishers:dev.to
Reality
- Evidence60
- Adoption38
- Hype gap+18
- Incentives35
- Confidence55