-

Author: javiereguiluz

reference/configuration/security.rst

@@ -83,7 +83,7 @@ expose_security_errors
 
 User enumeration is a common security issue where attackers infer valid usernames
 based on error messages. For example, a message like "This user does not exist"
-shown by your login form reveals whether a username is valid.
+shown by your login form reveals whether a username exists.
 
 This option lets you hide some or all errors related to user accounts
 (e.g. blocked or expired accounts) to prevent this issue. Instead, these