search

Merrit / adventure_list

Todo list that syncs to all your devices
GNU General Public License v3.0
47 stars 4 forks source link

API Keys published in firebase_settings. #23

Open dnsflnv opened 1 week ago

dnsflnv commented 1 week ago

Security issue.

Merrit commented 1 week ago

Hi there, thanks for raising the issue!

Are you referring to the firebase_options.dart?

If so, the docs indicate that information is considered public, not secret:

The content of the Firebase config file or object is considered public, including the app's platform-specific ID (Apple bundle ID or Android package name) and the Firebase project-specific values, like the API Key, project ID, Realtime Database URL, and Cloud Storage bucket name.