Author: Ryan Wyllie
MDL-63786 core: set $CFG->forceclean for logged in as sessions
Turn on the forceclean config setting when a user is logged in as a
different user. This is a precautionary measure, which forces all
user submitted content to be cleaned of JavaScript before rendering
it to the logged in as user.
http://git.moodle.org/gw?p=moodle.git;a=commit;h=070f24d006eab6b958eb083530de159b43c538ed
http://github.com/moodle/moodle/commit/070f24d006eab6b958eb083530de159b43c538ed
+ 3.5 en [sessionforceclean,core]