# Release Notes — 4.5.5 (since v4.5.3)
> Changes since **v4.5.2** (2026-06-03)
---
## Bug Fixes
### Security & Code Quality
- **[#3](../../issues/3)** Fix direct superglobal access — replaced raw `$_GET`/`$_POST`/`$_SERVER` with Moodle `required_param()` / `optional_param()` equivalents
- **[#7](../../issues/7)** Fix `PARAM_RAW` security risk — tightened parameter types to appropriate `PARAM_*` constants
- **[#8](../../issues/8)** Fix inadequate capability checking — added proper `require_capability()` guards
- **[#9](../../issues/9)** Fix direct `config_plugins` table access — replaced with `get_config()` / `set_config()` API calls
- **[#10](../../issues/10)** Fix Privacy API class missing personal data — extended provider to cover all stored personal data fields
### Standards Compliance
- **[#4](../../issues/4)** Add missing plugin license file (`LICENSE`)
- **[#5](../../issues/5)** Implement missing Activity Module backup/restore support
- **[#11](../../issues/11)** Fix Frankenstyle constants violation — renamed `LTI_GLAASTER_*` constants to `GLAASTER_*`
- **[#12](../../issues/12)** Update JS implementation to ES6 modules — converted legacy scripts to proper AMD/ES6 format
- **[#13](../../issues/13)** Fix hard-coded language strings — moved all user-facing strings to `lang/en/glaaster.php`
- **[#14](../../issues/14)** Fix risky global `$SESSION` usage — scoped session access via Moodle API
- **[#15](../../issues/15)** Transition to Templates, Output API, and AMD JavaScript Modules — full adoption of Moodle output layer (`$OUTPUT`, Mustache templates, AMD)
- **[#16](../../issues/16)** Add missing file boilerplate headers — all PHP files now include required GPL header block
- **[#17](../../issues/17)** Add missing language string definitions — resolved undefined string keys
---
## Refactoring
- **Namespace & OAuth delegation** — removed bundled `OAuth.php` / `TrivialStore.php` (1 152 lines) and delegated OAuth classes to `mod_lti`. Renamed 88 functions (`lti_glaaster_*` ' `glaaster_*`) and 29 constants across 52 files. Resolves Moodle namespace collision blocker ([moodledev.io checklist](https://moodledev.io/general/community/plugincontribution/checklist#namespace-collisions))
---
## Internal
- Lint fixes following ES6/AMD migration (no functional change)
