I can still reproduce in 15.10. The reason is simply that, as a feature, the login redirects back to where it was when clicking the login link and the simplest for that was to put the xredirect right in URL generated for the link.
I guess to fix this, we would need to inject the xredirect parameter in javascript at the moment the link is clicked. Another possibility is to disable that feature when action==export (since, whatever the export, it probably does not make much sense to redirect to an export after a login). |
|