Assignment

Why doesn't Moodle allow their users (and admins) to decide whether content uploaded by students is an untrusted source or not? There are many use cases where the content provided by students is perfectly trustable to be opened in the browser. This should be configurable with the default on disabled to provide a standard security, like so many settings in Moodle with a similar security impact.

Don't take me wrong, as a web programmer I do understand the fact that it might be a security risk, but the admin of the site should be the one who is end responsible.

Thanks so much for your reply since it is really a very old thread.

My concern is that I want to open images in the browser, since it can not be submited using text.

I know that untrusted images and PDFs can be a security risk, but how can ignore this risk?

or must I hack the code? I am not really willing to do that kind of hack.