#4996 removed XSS strip from adminconfig