ls ~/writing --tag=websockets

[01]Writing · Tag

Articles tagged "websockets".

$ tag --stat websockets
Articles
1
Published
Apr 2026
Reading time
7 min
In series
1

Articles tagged websockets

7 min [supabase][supabase-realtime][security]

Realtime broadcast scope is a security boundary, not a routing convenience

Default-public Realtime broadcasts leak message bodies to every subscriber. The private-channel flag plus RLS is the fix.

Supabase Production Hardening 6/8

supabase-realtime-broadcast-security-boundary--cover
Anyone who opens DevTools can subscribe to your Supabase channel and read every message.

[02]Narrow it down

[03]Read in order

One series runs through this tag.

All articles