What is Signed URL?
A time-boxed link granting private-file access without exposing the bucket. Uploads stay private; sharing stays possible; nothing leaks by default.
Related terms
Cloudflare R2 Object Storage
S3-compatible blob storage with no egress fees, bound to Workers for uploads, images, and media. Generated apps get private browser routes and smoke checks, not raw credentials.
R2 Bucket Binding
The named attachment (conventionally STORAGE) giving a Worker scoped access to one bucket. Bindings keep storage access declarative and auditable per project.
Security Headers
HTTP response headers (CSP, HSTS, frame options) hardening a deployed site. Edge hosts should set sensible defaults; generated apps inherit them without per-project configuration.
Cloudflare Worker
Serverless code running on Cloudflare’s edge network, close to visitors worldwide. BYOB deploys generated apps as Workers: no servers to provision, scale, or patch.
Dispatcher Worker
The SaaS router that maps each request — by publish slug or custom domain — to the right per-project Worker. One edge entry point, thousands of isolated apps behind it.
Dispatch Namespace
The isolate group containing a fleet of per-project Workers. Namespaces let one platform deploy, version, and route user projects independently.