search

Merrit / adventure_list

Todo list that syncs to all your devices
GNU General Public License v3.0
60 stars 5 forks source link

API Keys published in firebase_settings. #23

Closed dnsflnv closed 4 months ago

dnsflnv commented 4 months ago

Security issue.

Merrit commented 4 months ago

Hi there, thanks for raising the issue!

Are you referring to the firebase_options.dart?

If so, the docs indicate that information is considered public, not secret:

The content of the Firebase config file or object is considered public, including the app's platform-specific ID (Apple bundle ID or Android package name) and the Firebase project-specific values, like the API Key, project ID, Realtime Database URL, and Cloud Storage bucket name.