I've been using Cloudflare to set up a url-accessible web build of a game I contribute to (R2 Bucket
I've been using Cloudflare to set up a url-accessible web build of a game I contribute to (R2 Bucket for the game's files, connected to a Worker to serve it to users). Since I'm pretty inexperienced when it comes to web infrastructure, I want to check my work security-wise.
There are no sensitive files in our build, so we're not worried about reading, but we obviously don't want users to be able to modify the contents of our R2 Bucket. The worker is coded to return 403 (or 400) for any requests that aren't
There are no sensitive files in our build, so we're not worried about reading, but we obviously don't want users to be able to modify the contents of our R2 Bucket. The worker is coded to return 403 (or 400) for any requests that aren't
GETHEAD. As best I can tell, this should make it impossible for users to modify our files, unless they can somehow modify the code of the worker itself (I assume they can't). Is that correct, or is there something else I need to do to make sure our web build is secure?
