Index: modules/filter/filter.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/filter/filter.module,v
retrieving revision 1.314
diff -u -r1.314 filter.module
--- modules/filter/filter.module	28 Dec 2009 21:52:13 -0000	1.314
+++ modules/filter/filter.module	26 Jan 2010 23:29:01 -0000
@@ -17,6 +17,8 @@
       $output .= '<p>' . t('The Filter module allows administrators to configure text formats. A text format defines the HTML tags, codes, and other input allowed in content and comments, and is a key feature in guarding against potentially damaging input from malicious users. For more information, see the online handbook entry for <a href="@filter">Filter module</a>.', array('@filter' => 'http://drupal.org/handbook/modules/filter/')) . '</p>';
       $output .= '<h3>' . t('Uses') . '</h3>';
       $output .= '<dl>';
+      $output .= '<dt>' . t('Configuring text formats') . '</dt>';
+      $output .= '<dd>' . t('Configure text formats on the <a href="@formats">Text formats page</a>. <strong>Improper configuration of text formats can present a security risk</strong>. To ensure security, untrusted users should always be restricted to using text formats that restrict them either to entering plain text or using a safe set of HTML tags, since certain HTML tags can allow embedding malicious links or scripts in text. Fully trusted users can be granted permission to use less restrictive text formats, in order to create rich content.', array('@formats' => url('admin/config/content/formats'))) . '</dd>';
       $output .= '<dt>' . t('Applying filters to text') . '</dt>';
       $output .= '<dd>' . t('Each text format uses filters to manipulate text, and most formats apply several different filters to text in a specific order. Each filter is designed for a specific purpose, and generally either adds, removes, or transforms elements within user-entered text before it is displayed. A filter does not change the actual content, but instead, modifies it temporarily before it is displayed. One filter may remove unapproved HTML tags, while another automatically adds HTML to make URLs display as clickable links.') . '</dd>';
       $output .= '<dt>' . t('Defining text formats') . '</dt>';
@@ -27,8 +29,8 @@
       return $output;
 
     case 'admin/config/content/formats':
-      $output = '<p>' . t("Control which HTML tags and other formatting can be used for text input. Don't allow too much formatting for untrusted users. This can be a serious security risk.") . '</p>';
-      $output .= '<p>' . t('Text formats are presented in the order you arrange them below. Configure a text format to change its behavior.') . '</p>';
+      $output = '<p>' . t('Text formats determine the HTML tags, code, and other formatting that can be used when entering text. <strong>Improper text format configuration can present a security risk</strong>; learn more on the <a href="@filterhelp">Filter module help page</a>.', array('@filterhelp' => url('admin/help/filter'))) . '</p>';
+      $output .= '<p>' . t('Text formats are presented in the order you arrange them below.') . '</p>';
       return $output;
 
     case 'admin/config/content/formats/%':