merge hotfix

src/BeeTurbo/Handlers/ChunksBulkUploadHandler.cs

@@ -65,6 +65,12 @@ public async Task HandleAsync(HttpContext httpContext)
                             chunkPayload[SwarmChunk.SpanSize..].ToArray(),
                             hasher);
                         var chunkRef = new UploadedChunkRef(hash, batchId);
+
+                        //read check hash
+                        var checkHash = ReadSwarmHash(payload.AsSpan()[i..(i + SwarmHash.HashSize)]);
+                        i += SwarmHash.HashSize;
+                        if (checkHash != hash)
+                            throw new InvalidDataException("Invalid hash with provided data");
 
                         await dbContext.ChunksBucket.UploadFromBytesAsync(hash.ToString(), chunkPayload);
                         await dbContext.ChunkPushQueue.CreateAsync(chunkRef);
@@ -78,13 +84,24 @@ public async Task HandleAsync(HttpContext httpContext)
         }
 
         // Helpers.
+        private static SwarmHash ReadSwarmHash(Span<byte> payload)
+        {
+            if (payload.Length != SwarmHash.HashSize)
+                throw new ArgumentOutOfRangeException(nameof(payload));
+
+            var valueByteArray = new byte[SwarmHash.HashSize];
+            for (int i = 0; i < valueByteArray.Length; i++)
+                valueByteArray[i] = payload[i];
+            return SwarmHash.FromByteArray(valueByteArray);
+        }
+
         private static ushort ReadUshort(Span<byte> payload)
         {
             if (payload.Length != sizeof(ushort))
                 throw new ArgumentOutOfRangeException(nameof(payload));
 
             var valueByteArray = new byte[sizeof(ushort)];
-            for (int i = 0; i < sizeof(ushort); i++)
+            for (int i = 0; i < valueByteArray.Length; i++)
                 valueByteArray[i] = payload[i];
             return BitConverter.ToUInt16(valueByteArray);
         }

src/BeeTurbo/Program.cs

@@ -27,6 +27,7 @@
 using Microsoft.AspNetCore.Http;
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
 using Serilog;
 using Serilog.Exceptions;
 using Serilog.Sinks.Elasticsearch;
@@ -115,6 +116,7 @@ private static void ConfigureServices(WebApplicationBuilder builder, string beeU
             var config = builder.Configuration;
 
             // Add services.
+            services.AddCors();
             services.AddHttpForwarder();
 
             // Add request handlers.
@@ -157,6 +159,26 @@ private static void ConfigureServices(WebApplicationBuilder builder, string beeU
         [SuppressMessage("Reliability", "CA2000:Dispose objects before losing scope")]
         private static void ConfigureApplication(WebApplication app, string beeUrl)
         {
+            var env = app.Environment;
+
+            app.UseCors(builder =>
+            {
+                if (env.IsDevelopment())
+                {
+                    builder.SetIsOriginAllowed(_ => true)
+                        .AllowAnyHeader()
+                        .AllowAnyMethod()
+                        .AllowCredentials();
+                }
+                else
+                {
+                    builder.WithOrigins("https://etherna.io")
+                        .AllowAnyHeader()
+                        .AllowAnyMethod()
+                        .AllowCredentials();
+                }
+            });
+
             app.UseRouting();
             app.UseWebSockets(new WebSocketOptions
             {