Bug 1702983 - Display WebAuthn Attestation body of text in non bold. r=pbz,desktop-theme-reviewers,dao

Differential Revision: https://phabricator.services.mozilla.com/D131049

browser/base/content/browser.js

@@ -7947,12 +7947,12 @@ var WebAuthnPromptHelper = {
       checkbox: {
         label: gNavigatorBundle.getString("webauthn.anonymize"),
       },
+      hintText: "webauthn.registerDirectPromptHint",
     };
-
     this.show(
       tid,
       "register-direct",
-      "webauthn.registerDirectPrompt2",
+      "webauthn.registerDirectPrompt3",
       origin,
       mainAction,
       secondaryActions,
@@ -7985,11 +7985,15 @@ var WebAuthnPromptHelper = {
     let brandShortName = document
       .getElementById("bundle_brand")
       .getString("brandShortName");
-    let message = gNavigatorBundle.getFormattedString(
-      stringId,
-      ["<>", brandShortName],
-      1
-    );
+    let message = gNavigatorBundle.getFormattedString(stringId, [
+      "<>",
+      brandShortName,
+    ]);
+    if (options.hintText) {
+      options.hintText = gNavigatorBundle.getFormattedString(options.hintText, [
+        brandShortName,
+      ]);
+    }
 
     options.name = origin;
     options.hideClose = true;

browser/locales/en-US/chrome/browser/browser.properties

@@ -401,8 +401,8 @@ canvas.remember2=Remember this decision
 # WebAuthn prompts
 # LOCALIZATION NOTE (webauthn.registerPrompt2): %S is hostname
 webauthn.registerPrompt2=%S wants to register an account with one of your security keys. You can connect and authorize one now, or cancel.
-# LOCALIZATION NOTE (webauthn.registerDirectPrompt2):
-# %1$S is hostname. %2$S is brandShortName.
+# LOCALIZATION NOTE (webauthn.registerDirectPrompt3):
+# %S is hostname.
 # The website is asking for extended information about your
 # hardware authenticator that shouldn't be generally necessary. Permitting
 # this is safe if you only use one account at this website. If you have
@@ -411,7 +411,10 @@ webauthn.registerPrompt2=%S wants to register an account with one of your securi
 # And this is true even if you use a different profile / browser (or even Tor
 # Browser). To avoid this, you should use different hardware authenticators
 # for different accounts on this website.
-webauthn.registerDirectPrompt2=%1$S is requesting extended information about your security key, which may affect your privacy.\n\n%2$S can anonymize this for you, but the website might decline this key. If declined, you can try again.
+webauthn.registerDirectPrompt3=%S is requesting extended information about your security key, which may affect your privacy.
+# LOCALIZATION NOTE (webauthn.registerDirectPromptHint):
+# %S is brandShortName
+webauthn.registerDirectPromptHint=%S can anonymize this for you, but the website might decline this key. If declined, you can try again.
 # LOCALIZATION NOTE (webauthn.signPrompt2): %S is hostname
 webauthn.signPrompt2=%S wants to authenticate you using a registered security key. You can connect and authorize one now, or cancel.
 webauthn.cancel=Cancel

toolkit/themes/shared/popupnotification.inc.css

@@ -40,7 +40,6 @@
 }
 
 .popup-notification-hint-text {
-  opacity: 0.6;
   margin-top: .5em !important;
 }