Investigate Firebase Storage bucket reference

Build 26.16 · Scan 2026-10-09T11:35:11.637Z

3 distinct recorded findings; 3 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Firebase Cloud Storage bucket reference (the default <project>.appspot.com). Storing user files here is normal — it's only an exposure if the Storage security rules allow public read/list, which live verification tests.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

AndroidManifest.xml

Recorded match

Pattern recorded; identifying value redacted.

Detector rule

firebase_storage_bucket

Recorded file locations

AndroidManifest.xml
assets/platform/wellknown.json
assets/platform/lucy/standard-modern.html
assets/platform/lucy/lucy.js
assets/platform/lucy/protected-access.html
assets/platform/lucy/helpers.js
assets/platform/lucy/templates/profile.js
assets/platform/lucy/templates/standard.css
assets/platform/wellknown/draft/main.html
assets/platform/wellknown/debug/main.html

Additional locations were found; this list is limited to ten.