Investigate Firebase Storage bucket reference
Build 10.85.5 · Scan 2026-10-11T06:48:14.843Z
3 distinct recorded findings; 3 have inspectable metadata. Locations are representative, not an inventory of every source match.
A Firebase Cloud Storage bucket reference (the default <project>.appspot.com). Storing user files here is normal — it's only an exposure if the Storage security rules allow public read/list, which live verification tests.
Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.
Evidence preview
- Evidence type
- Static string match
- Representative location
resources.arsc- Recorded match
Pattern recorded; identifying value redacted.- Detector rule
firebase_storage_bucket- Recorded file locations
resources.arscreleasenossl/google-services.jsonperformance/google-services.jsonlaunchtime/google-services.jsonrelease/google-services.jsonpaytm/benchmarkPerformance/google-services.jsonpaytm/nonMinifiedRelease/google-services.jsonpaytm/nonMinifiedPerformance/google-services.json