vetkit.firebase.rules.public-write
A Firestore / Cloud Storage security rule allows writes without any condition (if true or no condition). Anyone on the internet can create, modify or delete this data with the public Firebase config.
Last updated:
Suite: Security
regex
A Firestore / Cloud Storage security rule allows writes without any condition (if true or no condition). Anyone on the internet can create, modify or delete this data with the public Firebase config.
Category: SECURITY · Engine rule severity: ERROR
How to fix it
Require authentication and ownership in the condition, e.g. allow write: if request.auth != null && request.auth.uid == userId;, and validate the written fields with request.resource.data.
References
Source: packages/engine/rules/sast/config.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.