Escrow re-auth answers in the box language; a stacks test no longer writes into its source folder

Both fixed without a row (size rule): login.msg.wrong_password for the escrow re-auth (TestEscrowReauth_WrongPasswordInTheBoxLanguage, red-proved); cmdManager gets its own DataDir (the update journal went into internal/stacks/, and the R-578 source walk tripped on it once). Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-17 10:18:53 +02:00
parent 88aa65d595
commit 68af0e97f2
5 changed files with 29 additions and 3 deletions
@@ -193,7 +193,9 @@ func (s *Server) escrowStartAPIHandler(w http.ResponseWriter, r *http.Request) {
 	}
 	if err := s.comparePassword([]byte(hash), []byte(r.FormValue("password"))); err != nil {
 		s.logger.Printf("[WARN] [web] escrow start: failed re-auth from %s", r.RemoteAddr)
-		escrowJSON(w, http.StatusUnauthorized, nil, "Hibás jelszó.")
+		// The login form's own sentence (same Hungarian bytes as the literal it replaces), so an English box answers in
+		// English. Pinned by TestEscrowReauth_WrongPasswordInTheBoxLanguage.
+		escrowJSON(w, http.StatusUnauthorized, nil, s.msg(r, "login.msg.wrong_password"))
 		return
 	}
 	s.clearAuthFailures(ip)