firebase - 这条规则有多安全？

Question

Firebase 数据库问题：
我想为未经身份验证的用户“打开”“投票”。这安全吗？

也许：

{
      "rules": {
        ".read": true,
              "posts": {
              "title": { ".write": "auth != null && auth.uid == 'XXXXXX'"},
              "url": { ".write": "auth != null && auth.uid == 'XXXXXX'"},
              "time": { ".write": "auth != null && auth.uid == 'XXXXXX'"},
              "vote": {".write": true,}     
            }
      }
    }

或者：

{
  "rules": {`enter code here`
    ".read": true,
          "posts": {
          "title": { ".write": "auth != null && auth.uid == 'XXXXXX'"},
          "url": { ".write": "auth != null && auth.uid == 'XXXXXX'"},
          "time": { ".write": "auth != null && auth.uid == 'XXXXXX'"},
          "vote": {".write": "newData.val() === data.val() + 1"}     
        }
  }
}

标签： firebasefirebase-realtime-databasefirebase-security