PostgREST schema exposed to anonymous users

Why it matters

Your API's schema lists every table and column, which gives attackers a map.

How to fix it

Revoke anon access to tables that don't need it; the schema then hides them.

How we test it

Passive — runs in the free check, looks only at what a browser can see.