Recommendations

Worker Routes/Triggers

When setting up the worker trigger, avoid using the format:

*.website.com/*

Instead, specify the protocol explicitly:

https://website.com/*

This ensures the worker doesn't run on unintended subdomains or protocols. Also, disable the route that points to managed.workers.dev as it's not needed.

Image Resizing

Ensure you did not check Resize images from any origin, unless you really need it. This option allows any origin to resize images on your behalf.