As a password reset user, I want the same message to appear after submitting data on Special:PasswordReset, so that information particular to my account does not get revealed to bad actors.
**Background:** Normally, if a user has hit their [[ https://www.mediawiki.org/wiki/Manual:$wgRateLimits | 'mailpassword' ]] limit, when they submit the Special:PasswordReset form they are shown the "Action throttled" message. However, if the user also has their Enhanced Password Reset preference enabled and submit only their username, they are instead shown the normal password reset message (as implemented in T238961). This reveals that they have the Enhanced Password Reset preference enabled, which is arguably a disclosure of private information. For example, for user Steve (EPR enabled) and Adam (EPR disabled), submitting different parameters in Special:PasswordReset:
| **Username** | **Email** | **Outcome** |
| Steve | | Normal password reset message |
| Steve | steve@local.wmftest.net | "Action throttled" |
| Adam | | "Action throttled" |
| Adam | adam@local.wmftest.net | "Action throttled" |
**Steps to reproduce problem:**
If "Eve" has EPR enabled:
1. Keep submitting Special:PasswordReset until I hit the `$wgRateLimit` for my user/IP (for most/all wikis, this is 5 attempts by the same IP within 1 hour)
2. Submit Special:PasswordReset with Username=Eve and a blank Email
Expected behavior: "Action throttled"
Observed behavior: Normal password reset message.
Environment -- Wiki(s): MediaWiki 1.35.0-alpha (9b125a0)
**Acceptance Criteria:**
* Display the same message to all users, regardless of whether they have hit their Manual:$wgRateLimits, after they have submitted any data on Special:PasswordReset
** Redirect all users to the password informational page (see screenshot example below)
** Update the second paragraph (see red outline in screenshot example) as follows:
*** If the information submitted is valid, a password reset email will be sent. If you haven't received an email, we recommend that you visit the [[ https://www.mediawiki.org/wiki/Help:Reset_password | reset password help page ]] or try again later. You can only **request a limited number of password resets within a short period of time**. **Only one password reset email will be sent per valid account every 24 hours** in order to prevent abuse.
**** Be sure to follow specifications (as seen above) for bold text
**** Maintain the link behavior, as found in the previous paragraph. This means that the link to the Mediawiki help page (in the current password reset informational page) should also be present in the updated paragraph.
**Visual Example (see red outline for paragraph text we should update):**
{F31757796}