-

Author: javiereguiluz

reference/configuration/security.rst

@@ -84,9 +84,10 @@ User enumeration is a common security issue where attackers infer valid username
 based on error messages. For example, a message like "This user does not exist"
 shown by your login form reveals whether a username is valid.
 
-This options lets you hide some/all errors related to user accounts (e.g. blocked
-or expired accounts) to avoid this issue. Instead, these errors will return a
-generic ``BadCredentialsException``. The value of this option can be any of:
+This option lets you hide some or all errors related to user accounts
+(e.g. blocked or expired accounts) to prevent this issue. Instead, these
+errors will trigger a generic ``BadCredentialsException``. The value of this
+option can be one of the following:
 
 * ``'none'``: hides all user-related security exceptions;
 * ``'account_status'``: shows account-related exceptions (e.g. blocked or expired