Security hardening: reject Firebase credential files inside webroot

Merge request reports

Loading