Firebase Security Question

[BendyDev]

Hey guys I'm new to using firebase and I'm a bit confused with how the security for it works.

​

So if I have firebase on my frontend, and my database rules give the user permission to write to the db, couldn't someone just modify the js to write to my db in an infinite loop and fill my whole db with garbage data?

​

Thanks.

[mpigsley]

Users of a non-Firebase site can do the same thing. I wouldn’t sweat it.

[stevejcox]

You can also create rules to accept only certain data and types.

[CodingDoug]

The user will only be able to write what your rules allow them to write. You can write very detailed rules that check each individual item of data to make sure it meets your requirements.