On: 900 Sites, 125M accounts, 1 Vulnerability

[dazh]

What would be the correct way to set up security to prevent this?

[xyzeva → dazh]

Setting up firebase security rules: https://firebase.google.com/docs/rules/