[wesleytodd]

This is a tracking issue for release 4.19.0

Please keep feature requests in their own issues

If you want to make a comment on a particular change, please make the comment in the "Files changed" tab so comments are not lost during a rebase.

List of changes for release:

• Prevent open redirect allow list bypass due to encodeurl
• deps: cookie@0.6.0

Testing this release

If you want to try out this release, you can install it with the following commands:

$ npm cache clean express
$ npm install expressjs/express#4.18.3-staging

Owners/collaborators: please do not merge this PR :)