To prevent privilege escalation attack, the HTML object tag toggle improves portal security by removing all <object>
HTML tags in the body of topics.
Users with the ADMIN
role can activate this toggle in the Security administration interface.
Disabling the toggle makes the portal vulnerable to privilege escalation attacks by users with the KHUB_ADMIN
or CONTENT_PUBLISHER
role.