feat!: update Drag and Drop v2 XBlock to prevent XSS vulnerabilities

BREAKING CHANGE: disallowed HTML tags (e.g. <script>) will no longer be rendered in LMS and Studio.
2022-11-28 16:04:49 +01:00
parent 279e4d0b67
commit 8662672444
3 changed files with 3 additions and 3 deletions
--- a/requirements/edx/base.txt
+++ b/requirements/edx/base.txt
@@ -1180,7 +1180,7 @@ xblock==1.6.1
    #   xblock-google-drive
    #   xblock-poll
    #   xblock-utils
-xblock-drag-and-drop-v2==2.5.0
+xblock-drag-and-drop-v2==3.0.0
    # via -r requirements/edx/base.in
 xblock-google-drive==0.3.0
    # via -r requirements/edx/base.in
--- a/requirements/edx/development.txt
+++ b/requirements/edx/development.txt
@@ -1675,7 +1675,7 @@ xblock==1.6.1
    #   xblock-google-drive
    #   xblock-poll
    #   xblock-utils
-xblock-drag-and-drop-v2==2.5.0
+xblock-drag-and-drop-v2==3.0.0
    # via -r requirements/edx/testing.txt
 xblock-google-drive==0.3.0
    # via -r requirements/edx/testing.txt
--- a/requirements/edx/testing.txt
+++ b/requirements/edx/testing.txt
@@ -1551,7 +1551,7 @@ xblock==1.6.1
    #   xblock-google-drive
    #   xblock-poll
    #   xblock-utils
-xblock-drag-and-drop-v2==2.5.0
+xblock-drag-and-drop-v2==3.0.0
    # via -r requirements/edx/base.txt
 xblock-google-drive==0.3.0
    # via -r requirements/edx/base.txt