When creating a new issue a few moments ago, I selected a project name and was given the error, "Malicious attempt to access unauthorized information detected." Attached is a screenshot.

Why on earth is this worded in a way that malicious intent is assumed on my part? A message like "An error was detected. Please try again." would be much more friendly.

CommentFileSizeAuthor
#1 311539_malicious_attempt.patch522 byteschristefano
malicious_attempt.png21.88 KBchristefano

Comments

christefano’s picture

christefano commented
Status: Active » Needs review
StatusFileSize
new 311539_malicious_attempt.patch522 bytes

For the sake of argument, here a patch that changes the string. Let's err on the possibility that the user did nothing wrong. Besides, the error doesn't need to let an attacker know he or she is on to something.

Anonymous’s picture

Anonymous (not verified) commented
Status: Needs review » Reviewed & tested by the community

I agree with this string change for the reasons given in #1.

dww’s picture

dww
we/he/they
commented
Status: Reviewed & tested by the community » Fixed

Yup. Committed to HEAD and DRUPAL-5--2. Thanks.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.