← Back to report

Investigate Firebase Realtime Database reference — confirmed publicly readable

Build 3.3.0 · Scan 2026-09-04T09:00:39.821Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Firebase Realtime Database URL. Nearly every app that uses Firebase ships one. It's only an exposure if the database rules are world-readable — that's what live verification checks.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

resources.arsc

Recorded match

Pattern recorded; identifying value redacted.