create-cloudflare 2.72.8 → 2.72.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cloudflare",
-  "version": "2.72.8",
+  "version": "2.72.10",
   "description": "A CLI for creating and deploying new applications to Cloudflare.",
   "keywords": [
     "cloudflare",
@@ -31,7 +31,7 @@
     "@babel/parser": "^7.21.3",
     "@babel/types": "^7.21.4",
     "@clack/prompts": "^1.2.0",
-    "@cloudflare/workers-types": "^5.20260915.1",
+    "@cloudflare/workers-types": "^5.20260921.1",
     "@types/command-exists": "^1.2.0",
     "@types/cross-spawn": "^6.0.2",
     "@types/deepmerge": "^2.2.0",
@@ -70,13 +70,13 @@
     "which-pm-runs": "^1.1.0",
     "wrap-ansi": "^9.0.0",
     "yargs": "^17.7.2",
-    "@cloudflare/cli-shared-helpers": "0.1.31",
-    "@cloudflare/shared-ast-primitives": "1.1.0",
-    "@cloudflare/vite-plugin": "1.54.10",
+    "@cloudflare/cli-shared-helpers": "0.1.35",
     "@cloudflare/mock-npm-registry": "0.0.0",
+    "@cloudflare/shared-ast-primitives": "1.1.0",
+    "@cloudflare/vite-plugin": "1.57.0",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.39.0",
-    "wrangler": "4.132.0"
+    "@cloudflare/workers-utils": "0.41.0",
+    "wrangler": "4.136.0"
   },
   "engines": {
     "node": ">=22.0.0"

package/templates/common/js/src/index.js

@@ -37,8 +37,8 @@ export default {
 		return new Response(
 			`Try making requests to:
       <ul>
-      <li><code><a href="/redirect?redirectUrl=https://example.com/">/redirect?redirectUrl=https://example.com/</a></code>,</li>
-      <li><code><a href="/proxy?modify&proxyUrl=https://example.com/">/proxy?modify&proxyUrl=https://example.com/</a></code>, or</li>
+      <li><code><a href="/redirect">/redirect</a></code>,</li>
+      <li><code><a href="/proxy?modify">/proxy?modify</a></code>, or</li>
       <li><code><a href="/api/todos">/api/todos</a></code></li>`,
 			{ headers: { 'Content-Type': 'text/html' } }
 		);

package/templates/common/js/src/proxy.js

@@ -1,16 +1,14 @@
+// Keep the destination fixed to prevent this Worker from becoming an open proxy.
+const PROXY_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx) {
 		const url = new URL(request.url);
 
-		const proxyUrl = url.searchParams.get('proxyUrl'); // get a query param value (?proxyUrl=...)
-		const modify = url.searchParams.has('modify'); // check if a query param is set (?proxyUrl=...&modify)
-
-		if (!proxyUrl) {
-			return new Response('Bad request: Missing `proxyUrl` query param', { status: 400 });
-		}
+		const modify = url.searchParams.has('modify'); // check if a query param is set (?modify)
 
 		// make subrequests with the global `fetch()` function
-		let res = await fetch(proxyUrl, request);
+		let res = await fetch(PROXY_URL, request);
 
 		// optionally, modify the respone
 		if (modify) {

package/templates/common/js/src/redirect.js

@@ -1,13 +1,9 @@
+// Keep the destination fixed to prevent this Worker from becoming an open redirect.
+const REDIRECT_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx) {
-		const url = new URL(request.url);
-		const redirectUrl = url.searchParams.get('redirectUrl'); // get a query param value (?redirectUrl=...)
-
-		if (!redirectUrl) {
-			return new Response('Bad request: Missing `redirectUrl` query param', { status: 400 });
-		}
-
 		// The Response class has static methods to create common Response objects as a convenience
-		return Response.redirect(redirectUrl);
+		return Response.redirect(REDIRECT_URL);
 	},
 };

package/templates/common/ts/src/index.ts

@@ -40,8 +40,8 @@ export default {
 		return new Response(
 			`Try making requests to:
       <ul>
-      <li><code><a href="/redirect?redirectUrl=https://example.com/">/redirect?redirectUrl=https://example.com/</a></code>,</li>
-      <li><code><a href="/proxy?modify&proxyUrl=https://example.com/">/proxy?modify&proxyUrl=https://example.com/</a></code>, or</li>
+      <li><code><a href="/redirect">/redirect</a></code>,</li>
+      <li><code><a href="/proxy?modify">/proxy?modify</a></code>, or</li>
       <li><code><a href="/api/todos">/api/todos</a></code></li>`,
 			{ headers: { 'Content-Type': 'text/html' } }
 		);

package/templates/common/ts/src/proxy.ts

@@ -1,16 +1,14 @@
+// Keep the destination fixed to prevent this Worker from becoming an open proxy.
+const PROXY_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx): Promise<Response> {
 		const url = new URL(request.url);
 
-		const proxyUrl = url.searchParams.get('proxyUrl'); // get a query param value (?proxyUrl=...)
-		const modify = url.searchParams.has('modify'); // check if a query param is set (?proxyUrl=...&modify)
-
-		if (!proxyUrl) {
-			return new Response('Bad request: Missing `proxyUrl` query param', { status: 400 });
-		}
+		const modify = url.searchParams.has('modify'); // check if a query param is set (?modify)
 
 		// make subrequests with the global `fetch()` function
-		let res = await fetch(proxyUrl, request);
+		let res = await fetch(PROXY_URL, request);
 
 		// optionally, modify the respone
 		if (modify) {

package/templates/common/ts/src/redirect.ts

@@ -1,13 +1,9 @@
+// Keep the destination fixed to prevent this Worker from becoming an open redirect.
+const REDIRECT_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx): Promise<Response> {
-		const url = new URL(request.url);
-		const redirectUrl = url.searchParams.get('redirectUrl'); // get a query param value (?redirectUrl=...)
-
-		if (!redirectUrl) {
-			return new Response('Bad request: Missing `redirectUrl` query param', { status: 400 });
-		}
-
 		// The Response class has static methods to create common Response objects as a convenience
-		return Response.redirect(redirectUrl);
+		return Response.redirect(REDIRECT_URL);
 	},
 } satisfies ExportedHandler<Env>;