MAS_Security 1.1.1 is a maintenance and quality release for the Vulnerability Disclosure Policy and Security Acknowledgments module for CMS Made Simple. It improves error logging, file write safety, and Forge packaging without changing frontend VDP behaviour or admin workflows.


What's new in 1.1.1


Admin email fallback failures are logged with error_log() instead of being swallowed silently.

security.txt writes verify directory permissions before atomic file operations (no @ suppression).

Development test script moved to Test/ and excluded from Forge zip builds.

No database schema changes required.



Upgrade notes


Install or upload the release, then run Upgrade in Module Manager if prompted.

Existing VDP pages, acknowledgment files, security.txt settings, and rate limits continue to work unchanged.

Compatible with CMSMS 2.2.22+ and PHP 7.4 through 8.6.



About MAS_Security

MAS Security provides a complete Vulnerability Disclosure Policy and Security Acknowledgments system: secure reporting forms with CSRF protection, rate limiting, honeypot, email notifications, event logging, in-browser acknowledgment editing, auto-generated RFC 9116 security.txt, and tabbed admin (Settings, Reports, Acknowledgments, Help, About, optional Donations).


Roadmap

Planned features for future releases:


PGP key management for encrypted vulnerability reports

CVE tracking and public disclosure timeline UI

Integration hooks for MAS_NotificationCenter alerts

Full Norwegian Bokmål admin translation

Security.txt signing and automated expiry reminders


Suggestions welcome via the Forge bug tracker or newstargeted.com/contact.