Hello everyone, I am building a project with Nuxt SSR + Supabase and I was wondering if I had to worry about CSRF and XSS. I was under the impression that the frontend and backend were secured enough together as they are managed in the same app ().
Supabase facilitates the login and its RLS is quite convenient.
I believe the Nuxt-Security module would be useful (ex. Rate Limiters) but is this a module any project absolutely need?
Also, if I setup a server API between the client and Supabase, how should I manage the security and permissions within the API?