adjust CORS headers and enhance Docker image naming with source hash

Author: max-ostapenko

src/controllers/cdnController.js

@@ -99,7 +99,7 @@ export const proxyReportsFile = async (req, res, filePath) => {
         if (!res.headersSent) {
             res.statusCode = 500;
             res.end(JSON.stringify({
-                error: 'Failed to retrieve file',
+                error: 'Server failed to respond',
                 details: error.message
             }));
         }

src/index.js

@@ -53,7 +53,7 @@ const getController = async (name) => {
 // Helper function to set CORS headers
 const setCORSHeaders = (res) => {
   res.setHeader('Access-Control-Allow-Origin', '*');
-  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+  res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
   res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Timing-Allow-Origin');
   res.setHeader('Access-Control-Max-Age', '86400');
 };
@@ -99,14 +99,6 @@ const handleRequest = async (req, res) => {
       return;
     }
 
-    // Validate URL to skip XSS attacks
-    const unsafe = /onerror|onload|javascript:/i;
-    if (unsafe.test(req.url)) {
-      res.statusCode = 400
-      res.end(JSON.stringify({ error: 'Invalid input' }));
-      return;
-    }
-
     // Parse URL path
     const pathname = req.path;
 

terraform/modules/run-service/main.tf

@@ -25,16 +25,14 @@ data "external" "source_hash" {
 
 # Build Docker image
 resource "docker_image" "function_image" {
-  name = "${var.region}-docker.pkg.dev/${var.project}/report-api/${var.service_name}"
+  # hash added to image tag to force rebuilds ans service image updates when source changes
+  name = "${var.region}-docker.pkg.dev/${var.project}/report-api/${var.service_name}:${data.external.source_hash.result.hash}"
 
   build {
     context    = var.source_directory
     dockerfile = "Dockerfile"
     platform   = "linux/amd64"
   }
-  triggers = {
-    source_hash = data.external.source_hash.result.hash
-  }
 }
 
 resource "docker_registry_image" "registry_image" {