Author: Ryan Wyllie
MDL-63786 core: set $CFG->forceclean for logged in as sessions
Turn on the forceclean config setting when a user is logged in as a
different user. This is a precautionary measure, which forces all
user submitted content to be cleaned of JavaScript before rendering
it to the logged in as user.
http://git.moodle.org/gw?p=moodle.git;a=commit;h=93dda3bfd3caaaa8d23fe8ede543f27ef774958d
http://github.com/moodle/moodle/commit/93dda3bfd3caaaa8d23fe8ede543f27ef774958d
+ 3.7 en [sessionforceclean,core]