Deprecate `"back"` magic string in redirects #5935

blakeembrey · 2024-09-10T03:35:29Z

Related to #5933, deprecates this and directs users to read security best practices for open redirects.

LinusU

Great! 👍

wesleytodd · 2024-09-11T18:54:47Z

We are preparing a release to fix some mis-aligned versions. Do we want to ship this deprecation as well?

blakeembrey · 2024-09-11T18:55:36Z

Yes, I think we should. Changed the base, feel free to merge.

blakeembrey · 2024-09-11T18:56:21Z

The only question is whether you'd prefer I use a link shortener instead? That way we can change the URL if docs move around.

wesleytodd · 2024-09-11T18:57:31Z

Hm, yeah I guess that makes sense. We can always add a html redirect page at that url if we wanted. Do you want to use the link shortener you used for the path to regex ones?

blakeembrey · 2024-09-11T19:07:12Z

Done, I'm just using dub.co but they only support git.new for GitHub URLs, so it's dub.sh for this one. We can buy a custom short domain if we care a lot about this too, or alias a sub-domain of the existing express domain later.

wesleytodd · 2024-09-11T19:19:45Z

Sounds good to me, we good to merge this?

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/line/line-bot-sdk-nodejs).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/nordic-game-lab/learnhub-sdk).

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cap-js/cds-dbs).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.19.2/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.19.2/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.19.2/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 ### [`v4.20.0`](https://redirect.github.com/expressjs/express/blob/HEAD/History.md#4200--2024-09-10) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.19.2...4.20.0) \========== - deps: [email protected] - Remove link renderization in html while redirecting - deps: [email protected] - Remove link renderization in html while redirecting - deps: [email protected] - add `depth` option to customize the depth level in the parser - IMPORTANT: The default `depth` level for parsing URL-encoded data is now `32` (previously was `Infinity`) - Remove link renderization in html while using `res.redirect` - deps: [email protected] - Adds support for named matching groups in the routes using a regex - Adds backtracking protection to parameters without regexes defined - deps: encodeurl@~2.0.0 - Removes encoding of `\`, `|`, and `^` to align better with URL spec - Deprecate passing `options.maxAge` and `options.expires` to `res.clearCookie` - Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/X-oss-byte/Nextjs).

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/redwoodjs/redwood).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`^4.20.0` -> `^4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "after 8:00 before 23:00 every weekday except on Friday" in timezone UTC. 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/valora-inc/hooks).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: tsang-bot[bot] <146107447+tsang-bot[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`^4.19.2` -> `^4.21.0`](https://renovatebot.com/diffs/npm/express/4.19.2/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.19.2/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.19.2/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 ### [`v4.20.0`](https://redirect.github.com/expressjs/express/blob/HEAD/History.md#4200--2024-09-10) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.19.2...4.20.0) \========== - deps: [email protected] - Remove link renderization in html while redirecting - deps: [email protected] - Remove link renderization in html while redirecting - deps: [email protected] - add `depth` option to customize the depth level in the parser - IMPORTANT: The default `depth` level for parsing URL-encoded data is now `32` (previously was `Infinity`) - Remove link renderization in html while using `res.redirect` - deps: [email protected] - Adds support for named matching groups in the routes using a regex - Adds backtracking protection to parameters without regexes defined - deps: encodeurl@~2.0.0 - Removes encoding of `\`, `|`, and `^` to align better with URL spec - Deprecate passing `options.maxAge` and `options.expires` to `res.clearCookie` - Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone UTC, Automerge - "after 8:00 before 23:00 every weekday except on Friday" in timezone UTC. 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/valora-inc/logging).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LUISDASARTIMANHAS/template-server-express-node-js).

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`4.20.0` -> `4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/redwoodjs/redwood).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [express](http://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`^4.19.2` -> `^4.21.0`](https://renovatebot.com/diffs/npm/express/4.20.0/4.21.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express/4.20.0/4.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>expressjs/express (express)</summary> ### [`v4.21.0`](https://redirect.github.com/expressjs/express/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/expressjs/express/compare/4.20.0...4.21.0) #### What's Changed - Deprecate `"back"` magic string in redirects by [@blakeembrey](https://redirect.github.com/blakeembrey) in [expressjs/express#5935 - [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5954 - fix(deps): [email protected] by [@wesleytodd](https://redirect.github.com/wesleytodd) in [expressjs/express#5951 - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://redirect.github.com/agadzinski93) in [expressjs/express#5946 #### New Contributors - [@agadzinski93](https://redirect.github.com/agadzinski93) made their first contribution in [expressjs/express#5946 **Full Changelog**: expressjs/express@4.20.0...4.21.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/dubzzz/fast-check).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Deprecate back magic string

c88b4e4

blakeembrey requested a review from a team September 10, 2024 03:35

blakeembrey changed the title ~~Deprecate back magic string~~ Deprecate "back" magic string in redirects Sep 10, 2024

UlisesGascon approved these changes Sep 10, 2024

View reviewed changes

LinusU approved these changes Sep 11, 2024

View reviewed changes

wesleytodd approved these changes Sep 11, 2024

View reviewed changes

blakeembrey changed the base branch from master to 4.x September 11, 2024 18:55

Use short URL

b663715

blakeembrey merged commit 77ada90 into expressjs:4.x Sep 11, 2024
47 checks passed

blakeembrey deleted the be/deprecate-back-string branch September 11, 2024 19:24

This was referenced Sep 11, 2024

[Snyk] Fix for 4 vulnerabilities Omrisnyk/npm-lockfiles#183

Open

[Snyk] Fix for 4 vulnerabilities Omrisnyk/goof#227

Open

[Snyk] Fix for 4 vulnerabilities Omrisnyk/goof-jenkins#41

Open

Omrisnyk mentioned this pull request Sep 12, 2024

[Snyk] Fix for 4 vulnerabilities Omrisnyk/goof-kubernetes#32

Open

This was referenced Sep 12, 2024

[Snyk] Fix for 4 vulnerabilities Omrisnyk/npm-lockfiles#184

Open

[Snyk] Security upgrade express from 4.17.1 to 4.21.0 Omrisnyk/dockerserver#12

Open

[Snyk] Security upgrade express from 4.16.4 to 4.21.0 Omrisnyk/ElastiQuill#67

Open

reposman33 mentioned this pull request Sep 15, 2024

Bump express from 4.17.1 to 4.21.0 in the npm_and_yarn group across 1 directory reposman33/componentLibrary#2

Open

louiechristie mentioned this pull request Sep 17, 2024

chore(deps): bump express from 4.18.2 to 4.21.0 louiechristie/newcrossities#43

Merged

This was referenced Sep 17, 2024

Bump serve-static and express in /BookingWebApp MilkaChucky/BookingWebApp#94

Merged

Bump send and express in /BookingWebApi MilkaChucky/BookingWebApp#95

Merged

andrejkurusiov mentioned this pull request Sep 17, 2024

build(deps): bump serve-static and express andrejkurusiov/react-cards-users#34

Merged

jjj333-p mentioned this pull request Sep 17, 2024

Bump serve-static and express jjj333-p/dendrite-admin-interface#20

Merged

This was referenced Sep 17, 2024

build(deps): bump serve-static and express davidshen84/davidshen84.github.io#110

Merged

build(deps): bump send and express davidshen84/davidshen84.github.io#111

Merged

This was referenced Sep 18, 2024

chore(deps): bump serve-static and express in /site ajfisher/ajfisher.me#216

Merged

chore(deps): bump send and express in /site ajfisher/ajfisher.me#217

Merged

renovate bot mentioned this pull request Sep 19, 2024

fix(deps): update all minor dependencies cds-snc/forms-api#30

Open

3 tasks

reposman33 mentioned this pull request Sep 19, 2024

Bump express from 4.18.2 to 4.21.0 in the npm_and_yarn group across 1 directory reposman33/hottext#1

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deprecate `"back"` magic string in redirects #5935

Deprecate `"back"` magic string in redirects #5935

blakeembrey commented Sep 10, 2024

LinusU left a comment

wesleytodd commented Sep 11, 2024

blakeembrey commented Sep 11, 2024

blakeembrey commented Sep 11, 2024

wesleytodd commented Sep 11, 2024

blakeembrey commented Sep 11, 2024

wesleytodd commented Sep 11, 2024

Deprecate "back" magic string in redirects #5935

Deprecate "back" magic string in redirects #5935

Conversation

blakeembrey commented Sep 10, 2024

LinusU left a comment

Choose a reason for hiding this comment

wesleytodd commented Sep 11, 2024

blakeembrey commented Sep 11, 2024

blakeembrey commented Sep 11, 2024

wesleytodd commented Sep 11, 2024

blakeembrey commented Sep 11, 2024

wesleytodd commented Sep 11, 2024

Deprecate `"back"` magic string in redirects #5935

Deprecate `"back"` magic string in redirects #5935