Supabase email links go to localhost: why confirmation and reset links break, and how to fix them
Change the Site URL, allow your redirect pages, and pass a redirect address the project accepts
Latest articles
Four checks to run before you launch a Lovable or Replit app (from 578 live apps)
Crawlable HTML, a sitemap, phone speed and two security headers, with figures from our check of 578 live apps
Supabase "infinite recursion detected in policy": why your team policy loops and how to fix it
Move the membership check into a security definer function in a private schema, then prove members see rows and others see none
Add a Content-Security-Policy to your AI-built app on Vercel or Netlify, step by step
Start report-only, read the violations, then enforce: CSP and frame-ancestors for Vite and React apps on Supabase
Exposed OpenAI or Gemini API key in your app? Fix it in three steps
Move the call into a Supabase Edge Function, rotate the key, and prove the browser never sees it
Fixing "new row violates row-level security policy" in Supabase
If your app shows "new row violates row-level security policy for table" (Postgres code 42501), the short answer: Postgres refused the row because no policy's WITH CHECK allows it for the role making