Security: XSS can be injected in the group edit view

True, I forgot that it can take an array type as well