← expressjs/express

CODEFOSSIL · express

res.location

method in lib/response.js:796 · Born 2013-01-13 (DERIVED, confidence 1.00)

13years old
17changes
5fixes
10authors
2callers
20142015201620172018201920202021202220232024202520262013-02-24 d874476 Proposal to allow relative redirects for applications that have been mounted at multiple paths.2013-02-24 956aa0c This works as expected, and has limited scope.2013-02-24 04b0c44 Test cases document this.2013-11-01 6619147 semicolons2013-11-02 b7a38af Use url.resolve to compute location header of relative paths2013-11-26 2f2a652 fixes #1826: res.redirect('toString') fails with 5002013-11-26 8a7a695 ocd2014-02-08 aac1d52 res.location: remove resolving relative urls2014-08-11 a57efea Fix original URL parsing in res.location2015-06-20 bb53b20 perf: remove argument reassignments in response prototype2016-06-14 76eaa32 Encode URL in res.location/res.redirect if not already encoded2024-03-20 0867302 Prevent open redirect allow list bypass due to encodeurl2024-03-20 a003cfa Allow passing non-strings to res.location with new encoding handling checks fixes #5554 #55552024-03-25 da4d763 Improved fix for open redirect allow list bypass2024-03-25 0b74695 Improved fix for open redirect allow list bypass2024-05-04 bf91946 deps: encodeurl@~2.0.0 (#5569)2024-09-10 bdd81f8 Delete `back` as a magic string (#5933)2013-01-13 a4d7b75 implemented res.location
Every commit that changed it, 2013-01-13 – 2024-09-10. Raised orange dots are fixes.

  1. Changed Delete `back` as a magic string (#5933)

    bdd81f8 · Blake Embrey

  2. Changed deps: encodeurl@~2.0.0 (#5569)

    bf91946 · Blake Embrey

  3. Changed Improved fix for open redirect allow list bypass

    0b74695 · Wes Todd fix · INFERRED

  4. Changed Improved fix for open redirect allow list bypass

    da4d763 · Wes Todd fix · INFERRED

  5. Changed Allow passing non-strings to res.location with new encoding handling checks fixes #5554 #5555

    a003cfa · Wes Todd fix · INFERRED

  6. Changed Prevent open redirect allow list bypass due to encodeurl

    0867302 · FDrag0n

  7. Changed Encode URL in res.location/res.redirect if not already encoded

    76eaa32 · Douglas Christopher Wilson

  8. Changed perf: remove argument reassignments in response prototype

    bb53b20 · Douglas Christopher Wilson

  9. Changed Fix original URL parsing in res.location

    a57efea · Douglas Christopher Wilson fix · INFERRED

  10. Changed res.location: remove resolving relative urls

    aac1d52 · Jonathan Ong

  11. Changed ocd

    8a7a695 · TJ Holowaychuk

  12. Changed fixes #1826: res.redirect('toString') fails with 500

    2f2a652 · Michael Ficarra fix · INFERRED

  13. Changed Use url.resolve to compute location header of relative paths

    b7a38af · Jérémy Lal

  14. Changed semicolons

    6619147 · Jérémy Lal

  15. Changed Test cases document this.

    04b0c44 · Michael Ahlers

  16. Changed This works as expected, and has limited scope.

    956aa0c · Michael Ahlers

  17. Changed Proposal to allow relative redirects for applications that have been mounted at multiple paths.

    d874476 · Michael Ahlers

  18. Born implemented res.location

    a4d7b75 · Julian Gruber