Skip to content

feat(node)!: remove experimentalErrorPageHost#15654

Open
florian-lefebvre wants to merge 1 commit intomainfrom
feat/node-remove-experimental-error-page-host
Open

feat(node)!: remove experimentalErrorPageHost#15654
florian-lefebvre wants to merge 1 commit intomainfrom
feat/node-remove-experimental-error-page-host

Conversation

@florian-lefebvre
Copy link
Member

@florian-lefebvre florian-lefebvre commented Feb 25, 2026

Changes

  • From @matthewp: "while you're in there I would remove experimentalErrorPageHost which is a security nightmare"
  • So this removes the option

Testing

Improves our tests to still check we read files from the filesystem

Docs

@florian-lefebvre florian-lefebvre self-assigned this Feb 25, 2026
@changeset-bot
Copy link

changeset-bot bot commented Feb 25, 2026

🦋 Changeset detected

Latest commit: a46d7ee

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions github-actions bot added the pkg: integration Related to any renderer integration (scope) label Feb 25, 2026
@florian-lefebvre florian-lefebvre marked this pull request as ready for review February 25, 2026 08:29
Copy link
Member

@sarah11918 sarah11918 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Florian! Just a couple thoughts from me!


Removes the `experimentalErrorPageHost` option

This option allowed to fetch the prerendered error page from a different host than the server it's currently running on.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
This option allowed to fetch the prerendered error page from a different host than the server it's currently running on.
This option allowed fetching a prerendered error page from a different host than the server is currently running on.


This option allowed to fetch the prerendered error page from a different host than the server it's currently running on.

However, we found it very hard to make it secure so we decided to remove it. You can replicate the old behavior by runninng with `mode: 'middleware'` and intercepting responses.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
However, we found it very hard to make it secure so we decided to remove it. You can replicate the old behavior by runninng with `mode: 'middleware'` and intercepting responses.
However, there can be security implications with prefetching from other hosts, and often more customization was required to do this safely. This has now been removed as a built-in option so that you can implement your own secure solution as needed and appropriate for your project via middleware.
#### What should I do?
If you were previously using this feature, you must remove the option from your adapter configuration as it no longer exists. You can replicate the previous behavior by running with `mode: 'middleware'` and intercepting responses.

Maybe something like this? I would also show the node config with a diff and - this line. If it's easy (and short!) enough to show a brief generic code example of intercepting a response, I think it could be handy, too. (If it's not, then I wouldn't bother. But I'd still show removing from the config!)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg: integration Related to any renderer integration (scope)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants