Learn · Track 8

Ship safely

How do I not get burned?

Before you share your vibe-coded app: the 6 security checks
Updated Oct 3, 2026
Is your Lovable app showing everyone's data? How to check, and turn on RLS to stop it
Updated Nov 3, 2026
Your API keys are in the browser: which ones matter and the fix
Updated Sep 27, 2026
The one file you must never commit — and the trap that ships secrets to the browser
Updated Oct 27, 2026
The Moltbook breach: what a public Supabase key without RLS grants
Sep 25, 2026