Security and privacy

Trusted content permission does not work for Teacher role, XSS vulnerable?