ENGCOM-9057: Only add referrer param to login url if referrer is a GET request #32891

Author: gabrieldagama

app/code/Magento/Customer/Model/Url.php

@@ -120,6 +120,7 @@ public function getLoginUrlParams()
                 ScopeInterface::SCOPE_STORE
             )
             && !$this->customerSession->getNoReferer()
+            && $this->request->isGet()
         ) {
             $referer = $this->urlBuilder->getUrl('*/*/*', ['_current' => true, '_use_rewrite' => true]);
             $referer = $this->urlEncoder->encode($referer);

dev/tests/integration/testsuite/Magento/Customer/Controller/Account/LoginPostTest.php

@@ -144,6 +144,25 @@ public function testLoginWithRedirectToDashboardDisabled(): void
         $this->assertRedirect($this->stringContains('test_redirect'));
     }
 
+    /**
+     * @magentoConfigFixture current_store customer/startup/redirect_dashboard 0
+     * @magentoConfigFixture current_store customer/captcha/enable 0
+     *
+     * @magentoDataFixture Magento/Customer/_files/customer.php
+     *
+     * @return void
+     */
+    public function testLoginFailureWithRedirectToDashboardDisabled(): void
+    {
+        $this->prepareRequest('customer@example.com', 'incorrect');
+        $this->dispatch('customer/account/loginPost');
+        $this->assertFalse($this->session->isLoggedIn());
+        $this->assertRedirect($this->logicalAnd(
+            $this->stringContains('customer/account/login'),
+            $this->logicalnot($this->stringContains('referer'))
+        ));
+    }
+
     /**
      * @magentoConfigFixture current_store customer/startup/redirect_dashboard 0
      * @magentoConfigFixture current_store customer/captcha/enable 0