If you have users activation approved by administrator and administrator is not logged in when he clicks the activation anchor in notification e-mail he will be redirected to the login page. Then after successful authorization he is redirected. The problem is that language filter changes the return url (the activation url) when it doesn't detect Itemid set in the url. With activation URL there is no Itemid set anywhere so it changes the return by wiping ANY redirection data like the most important part - the token. This patch just sets Itemid if it is an internal url and it was not set. That way any redirection data should be safe right now.
@artur-stepien is there a reason this is against 3.10 and not staging / 3.9? To me this sounds like a bug that should be fixed in 3.9 already. Any fix would than be merged up into 3.10 and 4.0. When you agree you can edit the base branch yourself or ping me to do so :-)
@artur-stepien is there a reason this is against 3.10 and not staging / 3.9? To me this sounds like a bug that should be fixed in 3.9 already. Any fix would than be merged up into 3.10 and 4.0. When you agree you can edit the base branch yourself or ping me to do so :-)