Under Site administration > Reports > Security Checks, there is a warning about XSS trusted users. In my case, that warning lists over 100 users, mostly students that were added a while ago. But I cannot figure out, what role/permission setting causes the warning.

It would be very helpful if the Details page could list the permissions that cause the warning (and maybe even the role that set that permission).