Back to all reviewers

Security warnings need guidance

neovim/neovim
Based on 1 comments
Other

Security-related warnings and error messages should provide clear, actionable guidance on how users can safely resolve the issue, not just inform them of the problem. When displaying security warnings, include specific instructions that guide users through the secure workflow.

Security Other

Reviewer Prompt

Security-related warnings and error messages should provide clear, actionable guidance on how users can safely resolve the issue, not just inform them of the problem. When displaying security warnings, include specific instructions that guide users through the secure workflow.

For example, instead of just stating a file is untrusted:

local msg = cwd .. pathsep .. 'Xfile is not trusted.'

Provide clear next steps:

local msg = cwd .. pathsep .. 'Xfile is not trusted. To enable it, choose (v)iew then run `:trust`.'

This approach helps users understand both the security concern and the proper way to address it, reducing the likelihood of unsafe workarounds or user confusion.

1
Comments Analyzed
Other
Primary Language
Security
Category

Source Discussions