4 ms·
The example given doesn't address CRSF. Does anyone know if the API can prevent them?
by cjg 14y ago
The example given doesn't address CRSF. Does anyone know if the API can prevent them?
- mikelehen 14y agoFirebase doesn't use cookies for authentication so CSRF isn't an issue. You have to explicitly call auth() on our JavaScript SDK with valid credentials, or include valid credentials in the querystring of a REST request.