# Installer subdirectory path correction

Confirmed source bug: all installer forms posted to `/install`, and all installer redirects went to `/install`, regardless of the path used to open the wizard. A deployment opened at `/xb/public/index.php/install` therefore submitted to the wrong location.

The installer now retains its actual validated request path in every form and redirect, including explicit `index.php` and subdirectory paths. The suggested base URL retains the directory, and the final login link retains the matching front-controller path. Unsafe redirect targets are rejected.

This patch is scoped to the installer navigation. Superseded deployment note: the new central URL normalization also covers storefront/admin forms, links, assets and JavaScript calls; see PERMANENT-URL-SETUP.md and mount-url-http.json. A correctly served public webroot and configured base URL are still required. No database/schema or private setup-code changes were made.

Validation: nine standalone path assertions passed. Six real HTTP assertions passed with CI4 under `/xb/public/index.php/install`, including private-code POST→303→database screen at the same path. This test does not certify the real hosting configuration.