Fix Redirect loop when accessing a forbidden route with 'user' query parameter

Created on 20 February 2024, 9 months ago
Updated 18 March 2024, 8 months ago

Problem/Motivation

When anonymously accessing a forbidden route while having "user" query parameter, the response will be a redirect to the originally requested URL, and therefore, the user will encounter an infinite redirect loop.

Steps to reproduce

  1. Install the module
  2. Anonymously navigate to /admin?user=x
  3. Observe the redirect loop

Proposed resolution

Change the priority of BetterLoginSubscriber::checkForRedirection

🐛 Bug report
Status

Fixed

Version

1.0

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024