How to test Supabase RLS with two accounts (10 minutes, no tools)
If user B can read user A's rows, your policies are too loose. Here's the two-account test, plus the SQL-editor way.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.