Change record status: 
Project: 
Introduced in branch: 
11.5.x
Introduced in version: 
11.5.0
Description: 

A custom warning message defined by the warning property in a permission definition is now appended to the default security warning displayed when the permission has restrict access set to true. Previously, setting a custom warning message in this way would override the default warning altogether.

Before
Permission with no custom warning message:

insert javascript:
  title: 'Insert custom JavaScript into pages'
  restrict access: true

Warning displayed:

Warning: Give to trusted roles only; this permission has security implications.

Permission with custom warning message:

insert javascript:
  title: 'Insert custom JavaScript into pages'
  restrict access: true
  warning: 'This permission is dangerous because it allows injecting arbitrary JS.'

Warning displayed:

This permission is dangerous because it allows injecting arbitrary JS.

After
Permission with custom warning message:

insert javascript:
  title: 'Insert custom JavaScript into pages'
  restrict access: true
  warning: 'This permission is dangerous because it allows injecting arbitrary JS.'

Warning displayed:

Warning: Give to trusted roles only; this permission has security implications. This permission is dangerous because it allows injecting arbitrary JS.

Impacts: 
Site builders, administrators, editors
Module developers