From bfaa1613b85ba62617f84f07b6662e9464cef305 Mon Sep 17 00:00:00 2001 From: Vinayak Singh Date: Tue, 2 Dec 2025 13:06:57 +0530 Subject: [PATCH 1/2] docs: remove deprecated res.redirect('back') from Express 3.x and 4.x API docs --- _includes/api/en/3x/res-redirect.md | 6 ------ _includes/api/en/4x/res-redirect.md | 9 --------- 2 files changed, 15 deletions(-) diff --git a/_includes/api/en/3x/res-redirect.md b/_includes/api/en/3x/res-redirect.md index dc87d689c2..aaff8c6ecf 100644 --- a/_includes/api/en/3x/res-redirect.md +++ b/_includes/api/en/3x/res-redirect.md @@ -43,9 +43,3 @@ would land you at `http//example.com/admin/post`: res.redirect('..') ``` -The final special-case is a `back` redirect, redirecting back to -the Referer (or Referrer), defaulting to `/` when missing. - -```js -res.redirect('back') -``` diff --git a/_includes/api/en/4x/res-redirect.md b/_includes/api/en/4x/res-redirect.md index 0ff536ef32..cd9c6e476e 100644 --- a/_includes/api/en/4x/res-redirect.md +++ b/_includes/api/en/4x/res-redirect.md @@ -45,14 +45,5 @@ Path-relative redirects are also possible. If you were on res.redirect('..') ``` -A `back` redirection redirects the request back to the [referer](http://en.wikipedia.org/wiki/HTTP_referer), -defaulting to `/` when the referer is missing. - -```js -res.redirect('back') -``` - -{% include admonitions/note.html content="`back` redirect was deprecated in 4.21.0, use `req.get('Referrer') || '/'` as an argument instead." %} - See also [Security best practices: Prevent open redirect vulnerabilities](http://expressjs.com/en/advanced/best-practice-security.html#prevent-open-redirects). From 363c81852971e7c731f45d80def32d9f83d8e997 Mon Sep 17 00:00:00 2001 From: Vinayak Singh Date: Wed, 3 Dec 2025 14:32:31 +0530 Subject: [PATCH 2/2] revert: restore res.redirect('back') in 3.x and 4.x docs The deprecated feature should remain documented in Express 3.x and 4.x where it still exists. Only Express 5 removed this feature. --- _includes/api/en/3x/res-redirect.md | 6 ++++++ _includes/api/en/4x/res-redirect.md | 9 +++++++++ 2 files changed, 15 insertions(+) diff --git a/_includes/api/en/3x/res-redirect.md b/_includes/api/en/3x/res-redirect.md index aaff8c6ecf..dc87d689c2 100644 --- a/_includes/api/en/3x/res-redirect.md +++ b/_includes/api/en/3x/res-redirect.md @@ -43,3 +43,9 @@ would land you at `http//example.com/admin/post`: res.redirect('..') ``` +The final special-case is a `back` redirect, redirecting back to +the Referer (or Referrer), defaulting to `/` when missing. + +```js +res.redirect('back') +``` diff --git a/_includes/api/en/4x/res-redirect.md b/_includes/api/en/4x/res-redirect.md index cd9c6e476e..0ff536ef32 100644 --- a/_includes/api/en/4x/res-redirect.md +++ b/_includes/api/en/4x/res-redirect.md @@ -45,5 +45,14 @@ Path-relative redirects are also possible. If you were on res.redirect('..') ``` +A `back` redirection redirects the request back to the [referer](http://en.wikipedia.org/wiki/HTTP_referer), +defaulting to `/` when the referer is missing. + +```js +res.redirect('back') +``` + +{% include admonitions/note.html content="`back` redirect was deprecated in 4.21.0, use `req.get('Referrer') || '/'` as an argument instead." %} + See also [Security best practices: Prevent open redirect vulnerabilities](http://expressjs.com/en/advanced/best-practice-security.html#prevent-open-redirects).