As a password reset user, I want the same message to appear after submitting data on Special:PasswordReset, so that information particular to my account does not get revealed to bad actors.
**Acceptance Criteria:**
* Display the same message to all users, regardless of whether they have hit their Manual:$wgRateLimits
** Redirect all users to the password informational page
** Add additional text to page: "You can only request a limi** Update the second paragraph as follows:
** If the information submitted number ofis valid, a password resets within a short period of time email will be sent. If you didn't receive an email,Note that only one password reset email will be sent per valid account every 24 hours in order to prevent abuse. wait a few minutes and then try again."You can only request a limited number of password resets within a short period of time. If you haven't received an email, we recommend that you visit the [[ https://www.mediawiki.org/wiki/Help:Reset_password | reset password help page ]] or try again later.
==== What is the problem?
Normally, if a user has hit their [[ https://www.mediawiki.org/wiki/Manual:$wgRateLimits | 'mailpassword' ]] limit, when they submit the Special:PasswordReset form they are shown the "Action throttled" message.
However, if the user also has their Enhanced Password Reset preference enabled and submit only their username, they are instead shown the normal password reset message (as implemented in T238961).
This reveals that they have the Enhanced Password Reset preference enabled, which is arguably a disclosure of private information.
For example, for user Steve (EPR enabled) and Adam (EPR disabled), submitting different parameters in Special:PasswordReset:
| **Username** | **Email** | **Outcome** |
| Steve | | Normal password reset message |
| Steve | steve@local.wmftest.net | "Action throttled" |
| Adam | | "Action throttled" |
| Adam | adam@local.wmftest.net | "Action throttled" |
==== Steps to reproduce problem
If "Eve" has EPR enabled:
1. Keep submitting Special:PasswordReset until I hit the `$wgRateLimit` for my user/IP (for most/all wikis, this is 5 attempts by the same IP within 1 hour)
2. Submit Special:PasswordReset with Username=Eve and a blank Email
**Expected behavior:** "Action throttled"
**Observed behavior:** Normal password reset message.
==== Environment
**Wiki(s):** MediaWiki 1.35.0-alpha (9b125a0)