Fix guides
Step-by-step fixes for findings that come up again and again in sites and apps built with AI tools. Each starts with a read-only check, and each fix was tested as the page describes.
- How to fix "RLS disabled in public" in Supabase
Supabase's advisor says RLS is disabled in public? Find every affected table with a read-only query, enable RLS, add owner-only policies and revoke anon grants. - How to fix a security definer view in Supabase
Supabase flags a security definer view because it bypasses RLS. Find affected views with a read-only query, then switch them to security_invoker. Tested SQL. - How to fix "HSTS missing from HTTPS server"
Scanner says HSTS is missing? Check the header with one read-only request, add Strict-Transport-Security safely in stages, and verify. Tested on this site. - How to fix "Content Security Policy missing"
Scanner says your Content-Security-Policy header is missing? Check it read-only, roll out a policy safely with Report-Only first, and verify. Tested on this site.