Fix psgdpr menu URL query separator

[Codencode]

Questions	Answers
Description?	This fixes the BO module configuration URL when BO tokens are disabled. Previously, the page query parameter was always appended using &, which produced an invalid URL when no query string was present yet. Example: - before: /admin/improve/modules/manage/action/configure/psgdpr&page=dataConfig - after: /admin/improve/modules/manage/action/configure/psgdpr?page=dataConfig When a token is present, the existing behavior is preserved: - /admin/improve/modules/manage/action/configure/psgdpr?_token=xxx&page=dataConfig In addition to fixing the query separator for module configuration URLs, it also: - fixes dataConsent.tpl and dataConfig.tpl form actions so they use the proper query separator depending on whether the base admin URL already contains a query string - makes Psgdpr::getTokenFromAdminLink() return an empty string when TokenInUrls::isDisabled() is enabled, to avoid relying on a token that is not present in the URL
Type?	bug fix
BC breaks?	no
Deprecations?	no
Fixed ticket?	Fixes #241 - PrestaShop/PrestaShop#41314
Sponsor company	Codencode snc
How to test?	1. Go to Advanced Parameters -> Security 2. Disable BO tokens 3. Open a module 4. Submit the configuration page form

[clotairer]

Thank you for this PR. I had the issue in 9.1 and it works fine.

[Hlavtox]

AI suggested that duplicate parameters can occur. :-)

What about this?

function setQueryParameter(url, key, value) {
  const u = new URL(url, window.location.origin);
  u.searchParams.set(key, value);
  return u.toString();
}

window.history.pushState({}, "", setQueryParameter(moduleAdminLink, "page", item));

[ps-jarvis]

This pull request seems to contain new translation strings. I have summarized them below to ease up review:

• Modules.Psgdpr.Admin ⚠️
  • Data visualization and automatic actions
  • Find here listed all personal data collected by PrestaShop and your installed modules.
  • These data will be used at 2 different levels :
  • Configure your checkboxes
  • Please customize your consent request messages in the dedicated fields below :

(Note: this is an automated message, but answering it will reach a real human)

[Codencode]

AI suggested that duplicate parameters can occur. :-)

What about this?

function setQueryParameter(url, key, value) {
  const u = new URL(url, window.location.origin);
  u.searchParams.set(key, value);
  return u.toString();
}

window.history.pushState({}, "", setQueryParameter(moduleAdminLink, "page", item));

Ok, I made the change. I also created an additional commit, because I realized that we also needed to modify the dataConfig.tpl and dataConsent.tpl files, in addition to the Psgdpr::getTokenFromAdminLink() method, to verify that the admin tokens were active.

[Codencode]

AI suggested that duplicate parameters can occur. :-)
What about this?

function setQueryParameter(url, key, value) {
  const u = new URL(url, window.location.origin);
  u.searchParams.set(key, value);
  return u.toString();
}

window.history.pushState({}, "", setQueryParameter(moduleAdminLink, "page", item));

Ok, I made the change. I also created an additional commit, because I realized that we also needed to modify the dataConfig.tpl and dataConsent.tpl files, in addition to the Psgdpr::getTokenFromAdminLink() method, to verify that the admin tokens were active.

ping @Hlavtox

[Codencode]

@Hlavtox, you're actually right, the links can be retrieved directly by passing the 'page' parameter. I hadn't considered it because I didn't want to change the current logic. I've made the changes — do you think it's okay now

[Hlavtox]

Paolo “Il Cleaner del Codice” Cunti 🚀

[AureRita]

Hi @Codencode

Thank you for your PR, I tested it and it seems to works as you can see :

Capture.video.du.2026-05-29.10-41-42.mp4

Tested on :
9.1.x
9.0.3

The PR seems to works as expected, It'll be QA ✔️ when the PHP test 'll be green

Thank you

[Codencode]

@Hlavtox @PrestaShop/committers
Can anyone tell me why there are errors on the CS-Fixer and PHPStan tests?

[jf-viguier]

@Codencode please rebase, should be ✅

[Codencode]

@Codencode please rebase, should be ✅

Done!

Thank you @jf-viguier

[Codencode]

Hi @Codencode

Thank you for your PR, I tested it and it seems to works as you can see :

Capture.video.du.2026-05-29.10-41-42.mp4
Tested on : 9.1.x 9.0.3

The PR seems to works as expected, It'll be QA ✔️ when the PHP test 'll be green

Thank you

@AureRita the tests are fine now.

[ps-jarvis]

PR merged, well done!

Message to @PrestaShop/committers: do not forget to milestone it before the merge.