Merge pull request #213 from edx/IM/security-fixes-4

common/lib/xmodule/xmodule/backcompat_module.py

common/lib/xmodule/xmodule/js/fixtures/imageinput.underscore

common/lib/xmodule/xmodule/js/src/video/04_video_control.js

common/static/js/capa/chemical_equation_preview.js

common/static/js/capa/drag_and_drop/targets.js

lms/static/js/components/header/views/header.js

lms/static/js/course_survey.js

lms/static/js/customwmd.js

lms/static/js/edxnotes/views/tab_item.js

lms/static/js/edxnotes/views/tab_panel.js

lms/static/js/leanModal.js

...static/js/learner_dashboard/views/collection_list_view.js