CSRF, XSS and other security features
Firebase Studio Prototyping Tool produces highly insecure app setups. A new userbase that is attracted by this AI feature may not realize that prototyping tool sets up loggers that expose all secrets in client side or that forms need security features like Zod or that cookies and sessions require CSRF implementation. This is insecurity by design. Prototyper needs to be set up correctly similar to how it nearly always comes with preset ui folder.
1
vote