From a1279ecca51fbe7014d841ed6bca8842d3441814 Mon Sep 17 00:00:00 2001 From: jessib Date: Thu, 28 Feb 2013 11:54:24 -0800 Subject: When attempting to login, the error messages should not leak information about whether a username is valid. This also means the error message is more appropriate if somebody tries to login with somebody else's username and their password. --- users/config/locales/en.yml | 1 + 1 file changed, 1 insertion(+) (limited to 'users/config') diff --git a/users/config/locales/en.yml b/users/config/locales/en.yml index 1b2789e..c1512eb 100644 --- a/users/config/locales/en.yml +++ b/users/config/locales/en.yml @@ -7,6 +7,7 @@ en: login_message: "Please login with your account." wrong_password: "wrong password" user_not_found: "could not be found" + invalid_user_pass: "Not a valid username/password combination" update_login_and_password: "Update Login and Password" cancel_account: "Cancel your account" remove_account: "Remove Account" -- cgit v1.2.3 From 733426aa3992dafaf1c58ede7e74018057a01148 Mon Sep 17 00:00:00 2001 From: jessib Date: Mon, 4 Mar 2013 11:37:56 -0800 Subject: Update tests and documentation to reflect changed error messages with incorrect username or password on login attempt. --- users/config/locales/en.yml | 2 -- 1 file changed, 2 deletions(-) (limited to 'users/config') diff --git a/users/config/locales/en.yml b/users/config/locales/en.yml index c1512eb..9e7d4b2 100644 --- a/users/config/locales/en.yml +++ b/users/config/locales/en.yml @@ -5,8 +5,6 @@ en: cancel: "Cancel" login: "Login" login_message: "Please login with your account." - wrong_password: "wrong password" - user_not_found: "could not be found" invalid_user_pass: "Not a valid username/password combination" update_login_and_password: "Update Login and Password" cancel_account: "Cancel your account" -- cgit v1.2.3