Security headers CV vanity URL

Author: cmbuckley

.github/workflows/cloudflare-worker.yml

@@ -35,7 +35,7 @@ jobs:
               NETLIFY_JWS_SECRET
     steps:
       - uses: actions/checkout@v6
-      - name: Deploy Cloudflare Worker (${{ matrix.worker }})
+      - name: (${{ matrix.worker }}) Deploy Cloudflare Worker
         uses: cloudflare/wrangler-action@v3
         with:
           apiToken: ${{ secrets.CF_API_TOKEN }}

_cf/security-headers/index.js

@@ -115,6 +115,12 @@ async function handleRequest(req) {
         return addSecurity(req, requestUrl)
     }
 
+    if (match = requestUrl.hostname.match(/^cv-(staging|role)-([^.]+)\./)) {
+        const type = (match[1] == 'staging' ? 'deploy-preview' : 'role')
+        requestUrl.hostname = `${type}-${match[2]}--cmbuckley-cv.netlify.app`
+        return addSecurity(req, requestUrl)
+    }
+
     if (req.method == 'POST' && requestUrl.hostname == 'cmbuckley.co.uk') {
         requestUrl.hostname = 'cmbuckley.netlify.app'
         return addSecurity(req, requestUrl)
@@ -126,7 +132,7 @@ async function handleRequest(req) {
         return Response.redirect(dest, 302)
     }
 
-    if (requestUrl.hostname.match(/scripts\.cmbuckley\.co\.uk$/)) {
+    if (requestUrl.hostname.endsWith('scripts.cmbuckley.co.uk')) {
         return await fetch(req)
     }