@cloudflare/vitest-pool-workers@0.16.20
📦 cloudflare-workersView on GitHub →
✨ 2 features🐛 1 fixes🔧 5 symbols
Summary
This patch introduces new test helpers for Durable Object eviction testing and fixes a critical SQL injection vulnerability in D1 migration commands by properly escaping table names and filenames.
✨ New Features
- Added `evictDurableObject` and `evictAllDurableObjects` test helpers to `cloudflare:test` to allow testing Durable Object behavior across evictions.
- Durable Object eviction is now graceful: durable storage is preserved, in-memory state is reset, hibernatable WebSockets are hibernated, and eviction waits for in-flight requests to drain.
🐛 Bug Fixes
- Fixed an issue in D1 migration commands where `migrationsTableName` and filenames were interpolated directly into SQLite queries without escaping, leading to SQL injection vulnerabilities or errors if names contained quotes or special characters.