5.2.0

Author: bencroker

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Release Notes for Sherlock
 
+## 5.2.0 - 2025-07-21
+
+- Added basic auth username and password settings ([#48](https://github.com/putyourlightson/craft-sherlock/issues/48)).
+- Added non-CSP, browser-supported directives ([#47](https://github.com/putyourlightson/craft-sherlock/issues/47)).
+
 ## 5.1.2 - 2025-04-11
 
 - Improved the processing of comma-separated notification email addresses ([#46](https://github.com/putyourlightson/craft-sherlock/issues/46)).

composer.json

@@ -1,7 +1,7 @@
 {
   "name": "putyourlightson/craft-sherlock",
   "description": "Security scanner and monitor to keep your site and CMS secure.",
-  "version": "5.1.2",
+  "version": "5.2.0",
   "type": "craft-plugin",
   "homepage": "https://putyourlightson.com/plugins/sherlock",
   "license": "proprietary",

src/templates/_settings.twig

@@ -287,7 +287,8 @@
                 {{ forms.lightswitchField({
                     label: 'Basic Auth'|t('sherlock'),
                     name: (isLite ? '' : 'basicAuthEnabled'),
-                    instructions: 'Whether to enable basic authentication when accessing the site.'|t('sherlock'),
+                    instructions: 'Whether to enable [basic HTTP authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Authentication#basic_authentication_scheme) when accessing the site.'|t('sherlock'),
+                    on: (isLite ? false : settings.basicAuthEnabled),
                     suggestEnvVars: true,
                     suggestions: craft.cp.getEnvSuggestions(),
                     warning: (config.basicAuthEnabled is defined ? configWarning('basicAuthEnabled')),

tests/pest/.gitignore tests/.gitignoretests/pest/.gitignore renamed to tests/.gitignore

@@ -6,7 +6,7 @@ This document outlines the test specification for the Sherlock plugin.
 
 ## Feature Tests
 
-### [s](pest/Feature/TestsTest.php)
+### [s](Feature/TestsTest.php)
 
 ![Pass](https://raw.githubusercontent.com/putyourlightson/craft-generate-test-spec/main/icons/pass.svg) Passes `https` control panel test.  
 ![Pass](https://raw.githubusercontent.com/putyourlightson/craft-generate-test-spec/main/icons/pass.svg) Passes `https` front-end test.