diff --git a/src/system/UsersModule/Controller/AccessController.php b/src/system/UsersModule/Controller/AccessController.php index b02553912f..4789325a60 100644 --- a/src/system/UsersModule/Controller/AccessController.php +++ b/src/system/UsersModule/Controller/AccessController.php @@ -221,6 +221,10 @@ private function sanitizeReturnUrl(Request $request, $returnUrl = null) return $returnUrl; } + if (false !== mb_strpos($returnUrl, $request->getUriForPath(''))) { + return $returnUrl; + } + if ('/' !== mb_substr($returnUrl, 0, 1)) { $returnUrl = '/' . $returnUrl; }