Author: Ryan Wyllie
MDL-63786 core: set $CFG->forceclean for logged in as sessions
Turn on the forceclean config setting when a user is logged in as a
different user. This is a precautionary measure, which forces all
user submitted content to be cleaned of JavaScript before rendering
it to the logged in as user.
http://git.moodle.org/gw?p=moodle.git;a=commit;h=a37e26d2efe1ca0e4d8d69c611a748af35b33674
http://github.com/moodle/moodle/commit/a37e26d2efe1ca0e4d8d69c611a748af35b33674
+ 3.6 en [sessionforceclean,core]