v27.2.3

Update dependency express to v4.20.0 [SECURITY]

Notable changes

• deps: [email protected]
• deps: [email protected]
• deps: [email protected]
• Remove link renderization in html while using res.redirect
• deps: [email protected]
• deps: encodeurl@~2.0.0
• Deprecate passing options.maxAge and options.expires to res.clearCookie

expressjs/express (express)

v4.20.0

Compare Source

==========

• deps: [email protected]
  • Remove link renderization in html while redirecting
• deps: [email protected]
  • Remove link renderization in html while redirecting
• deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
• Remove link renderization in html while using res.redirect
• deps: [email protected]
  • Adds support for named matching groups in the routes using a regex
  • Adds backtracking protection to parameters without regexes defined
• deps: encodeurl@~2.0.0
  • Removes encoding of \, |, and ^ to align better with URL spec
• Deprecate passing options.maxAge and options.expires to res.clearCookie
  • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

List of commits

13a07f2 (Update dependency express to v4.20.0 [SECURITY], 2024-09-16)