Moodle 3.5 disable "EMBED and OBJECT tags" doesn't work

Moodle 3.5 disable "EMBED and OBJECT tags" doesn't work

by Dae Woong Lim -
Number of replies: 0

Hi all,


Please help our moodle issue. We are currently testing Moodle 3.5 with multiple cases. One of our main goal was to control permission on adding javascript on course pages. 


- Disabled Trusted Content option from Site admin -> Site Security  - user still able to add javascript

- Disabled Embed and Object tags from Site admin -> Site Security - user still able to add javascript


Plus we tested Vimeo video setting from Multi media players

- Disabled Vimeo from Site admin -> Plugins -> Media players - user still able to add <iframe> with vimeo video, students can still see the video.


Why this disabling doesnt work? Anyone or organization had these issues?

Average of ratings: -