[Steven Zahm]

@ Bill

Thanks for the detailed feedback! It would make sense that these were inserted by an admin editing the entries in the admin because only an admin has the permissions required to insert unfiltered HTML into the bio and notes fields. All other roles on the site, the HTML would be filtered, removing script tags, iframes and such.

It’s actually possible this has been in the db for quite some time. Older version of Connections would filter the bio and notes on display rather than save so script tags would have been removed regardless of user role. In version 8.2.10 I changed this to match the way WordPress handles it. The filtering only happens on saving to the db. This is more performant and allows the admin, which has the unfiltered HTML capability, to add inline scripts/iframes and such.