From 86626724445f34d8c8afc1dcd7aa10ac7fbdb8ad Mon Sep 17 00:00:00 2001
From: Agrendalath <piotr@surowiec.it>
Date: Mon, 28 Nov 2022 16:04:49 +0100
Subject: [PATCH] feat!: update Drag and Drop v2 XBlock to prevent XSS
 vulnerabilities

BREAKING CHANGE: disallowed HTML tags (e.g. <script>) will no longer be
rendered in LMS and Studio.
---
 requirements/edx/base.txt        | 2 +-
 requirements/edx/development.txt | 2 +-
 requirements/edx/testing.txt     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt
index 8e3692aaf3..70cc273617 100644
--- a/requirements/edx/base.txt
+++ b/requirements/edx/base.txt
@@ -1180,7 +1180,7 @@ xblock==1.6.1
     #   xblock-google-drive
     #   xblock-poll
     #   xblock-utils
-xblock-drag-and-drop-v2==2.5.0
+xblock-drag-and-drop-v2==3.0.0
     # via -r requirements/edx/base.in
 xblock-google-drive==0.3.0
     # via -r requirements/edx/base.in
diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt
index 17c02cd178..2eb8f2d280 100644
--- a/requirements/edx/development.txt
+++ b/requirements/edx/development.txt
@@ -1675,7 +1675,7 @@ xblock==1.6.1
     #   xblock-google-drive
     #   xblock-poll
     #   xblock-utils
-xblock-drag-and-drop-v2==2.5.0
+xblock-drag-and-drop-v2==3.0.0
     # via -r requirements/edx/testing.txt
 xblock-google-drive==0.3.0
     # via -r requirements/edx/testing.txt
diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt
index b23be755b9..32ba266448 100644
--- a/requirements/edx/testing.txt
+++ b/requirements/edx/testing.txt
@@ -1551,7 +1551,7 @@ xblock==1.6.1
     #   xblock-google-drive
     #   xblock-poll
     #   xblock-utils
-xblock-drag-and-drop-v2==2.5.0
+xblock-drag-and-drop-v2==3.0.0
     # via -r requirements/edx/base.txt
 xblock-google-drive==0.3.0
     # via -r requirements/edx/base.txt