This has been plaguing me for ages as something I could not reproduce.
I think I finally have.
I think to reproduce you have to log in *incorrectly* from either an access denied screen or a 100% standalone login page (with no redirect parameter) then log in *correctly*. It then redirects you to an invalid URL.
I think I finally have.
I think to reproduce you have to log in *incorrectly* from either an access denied screen or a 100% standalone login page (with no redirect parameter) then log in *correctly*. It then redirects you to an invalid URL.
Fixed.