Row Level Security in Lovable apps: why your database might be public
Originally published on howsafeismyapp.com . Here is the uncomfortable truth about most Lovable apps: the database is not behind your login form. It is behind Supabase's API — and whether that API hands out your data to strangers depends on one setting most AI-generated apps never mention: Row Level Security . This is the most serious finding our scanner sees in the wild. It is also completely…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
