Log in as admin Navigate to Security > Site security settings in site administration Turn on Enable trusted content and save Create a new user ( manager ) Navigate to Users > Permissions > Assign system roles in site administration Add new user to the Manager role Navigate to Users > Permissions > Define roles in site administration Edit the Manager role Remove the moodle/site:trustcontent capability and save Navigate to Users > Accounts > Cohort custom fields in site administration Add a new category (if none exists) Add a new Text area custom field Name: Test Shortname: test Navigate to Users > Accounts > Cohorts in site administration Add a new cohort: Name: First Test ( insert via source code view ): <p> Text with iframe tag <iframe src="https://moodle.org/"></iframe> </p> Log out Log in as test user ( manager ) Navigate to Users > Accounts > Cohorts in site administration Add a new cohort: Name: Second Test ( insert via source code view ): <p> Text with iframe tag <iframe src="https://moodle.org/"></iframe> </p> Log out Log in as admin Navigate to Reports from user menu Create a new report from Cohorts report source Include default setup: Yes In report editor add hte Cohort > Test column Confirm that cohort First shows the original Test content (including iframe) Confirm that cohort Second shows the cleaned Test content (excluding iframe) Navigate to Security > Site security settings in site administration Turn off Enable trusted content and save Re-visit your cohorts custom report Confirm that both cohorts now show the cleaned Test content