Flames Shield Documentation
Missing default deny rule
Initializing search
flames-shield/documentation
Home
Getting Started
Setup Rate Limiting
Security Monitoring and Response
Cloud Messaging
App Check
Authentication Rules
Firestore
Functions
AI Logic
Storage
Realtime Database
Flames Shield Documentation
flames-shield/documentation
Home
Getting Started
Getting Started
Quickstart
Setting Billing Kill-Switch
Testing the Kill-Switch
Setup Rate Limiting
Security Monitoring and Response
Security Monitoring and Response
Security Logging
Cloud Messaging
Cloud Messaging
Insecure FCM Configuration
App Check
App Check
Core Issues
Core Issues
Not Enabled for Application
Firestore Enforcement Disabled
Storage Enforcement Disabled
Functions Enforcement Disabled
Configuration Issues
Configuration Issues
App Attest Misconfigured
Incomplete App Registration
SDK Not Initialized
Authentication Rules
Authentication Rules
Apikey identity toolkit quota not tightened
Firebase Authentication: Anonymous Authentication Unnecessarily Enabled
Auth authorized domains not configured or too permissive
Auth captcha not implemented for sensitive operations
Auth default account creation rate limits not reviewed
Auth email enumeration protection disabled
Auth end user mfa not implemented
Auth mfa enrollment without email verification
Auth open user sign up enabled
Auth password policies not enforced in require mode
Auth sms region policy not configured for mfa
Firebase Authentication: Weak Password Complexity Policy
Firebase Authentication: Weak Password Policy
Firestore
Firestore
Critical Issues
Critical Issues
Universal Public Access
Access Based on Unverified Attribute
Unrestricted Auth Access
Rule Configuration Issues
Rule Configuration Issues
Missing Explicit Rule
Overly Broad Recursive Wildcard
Incorrect Request Resource
Validation and Performance
Validation and Performance
Missing Write Validation
Excessive Reads
Insufficient Rate Limiting
Rule Quality
Rule Quality
Overly Complex Rules
Implicit Allow
Advanced Issues
Advanced Issues
Data Leakage Insecure Storage
Privilege Escalation Write Access
Transaction Batched Write Vulnerabilities
Overly Permissive Indirect Access
Misconfigured TTL
Functions
Functions
Security Issues
Security Issues
CORS Misconfiguration
Hardcoded Secrets
Missing Authorization
Excessive Timeout
AI Logic
AI Logic
Storage
Storage
Realtime Database
Realtime Database
Missing default deny rule
The security rules do not start from a secure
Back to top