InvalidArgumentException: The user-entered string 'portal' must begin with a '/', '?', or '#'. in Drupal\Core\Url::fromUserInput()

@alecsmrekar please don't use patches on an issue where a MR was used. Please incorporate the (only issue related!!) changes into the MR so we can see the interdiff. All other changes should go into separate issues please.

This no longer appears to be an issue. As mentioned above, the initial patch supplied here: https://git.drupalcode.org/project/legal/-/merge_requests/3.patch actually breaks the redirect altogether (in the 3.x branch at least). After I removed this patch I attempted to recreate the initial bug reported in this issue but cannot. I suspect the problem was fixed elsewhere and this issue merely needs to be closed.

I have not tried any of the patches, however, I can confirm that this issue is still present on 3.0.1

So do we need a new stable release or is this also still happening in 3.0.x @frob?

I am unable to test the new version at the moment. However, the test is pretty simple. If you visit `/user/login?destination=internet` then it should break with the OP's error.

To fix this ourselves we patched the `public/modules/contrib/legal/src/Form/LegalLogin.php` file to ensure the destination is valid. It looks like you where leaning toward a solution which involved the redirection service so I didn't submit my patch.

Replace

      $redirect = $_GET['destination'];

with

      $destination_path = $_GET['destination'];
      if (strpos($destination_path, '/') !== 0) {
        $destination_path = '/' . $destination_path;
      }
      $redirect = $destination_path;

Automatically closed - issue fixed for 2 weeks with no activity.