Supabase row level security isn't enough: how to stop users writing bad data to your app
RLS decides who can write a row, not what goes in it. Someone sent 90 million points straight to our app's database without breaking a single rule. Here are the three database checks that fixed it, with the SQL.










