build!: Restructure repo & rename to xblocks-core - #244

Draft

kdmccormick wants to merge 9 commits into

mainfrom

kdmccormick/xblocks-core

GitHub Advanced Security / CodeQL failed Aug 13, 2026 in 4s

5 new alerts including 4 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

4 high
1 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 326 in src/xblock_discussion/assets/static/spec/view/discussion_thread_list_view_spec.js

Code scanning / CodeQL

DOM text reinterpreted as HTML High test

is reinterpreted as HTML without escaping meta-characters.

is reinterpreted as HTML without escaping meta-characters.

Check failure on line 257 in src/xblock_problem/capa/static/js/capa/protex/hosted.html

Code scanning / CodeQL

Insecure randomness High

This uses a cryptographically insecure random number generated at

in a security context.

Check failure on line 349 in src/xblock_problem/capa/static/js/capa/src/jschannel.js

Code scanning / CodeQL

Unvalidated dynamic method call High

Invocation of method with

name may dispatch to unexpected target and cause an exception.

Check failure on line 63 in src/xblock_video/tests/js/video_context_menu_spec.js

Code scanning / CodeQL

DOM text reinterpreted as HTML High test

is reinterpreted as HTML without escaping meta-characters.

is reinterpreted as HTML without escaping meta-characters.

Check warning on line 5325 in src/xblock_video/assets/js/src/vendor/jquery.js

Code scanning / CodeQL

Unsafe expansion of self-closing HTML tag Medium library

This self-closing HTML tag expansion invalidates prior sanitization as

may match part of an attribute value.