c
cengo3509

Cenk Kurtoglu

@cengo3509

Supabase RLS security audits

Turquie
Anglais, Turc
Certaines informations sont présentées en anglais.
À propos de moi
I audit Supabase authorization boundaries for teams shipping on Lovable, Bolt, Cursor and Replit. The generated SQL is usually valid. What it misses is whether a policy that exists is actually correct: a permissive policy quietly cancelling a restrictive one, a membership join that is not isolated, or a service-role key reachable from a client path. All three pass Supabase's free linter, and all three pass tests written from a single account. I work from read-only access or a sanitized schema dump. I never need your service-role key.... Plus d’infos

Compétences

c
cengo3509
Cenk Kurtoglu
hors ligne •