Merge pull request #24511 from edx/private_to_public_46becdc

Mergeback PR from private to public.

lms/templates/student_account/register.underscore

@@ -51,7 +51,7 @@
         <span class="auto-register-message"><%- context.autoRegisterWelcomeMessage %></span>
     <% } %>
 
-    <%= context.fields %>
+    <%= context.fields /* xss-lint: disable=underscore-not-escaped */ %>
 
     <div class="form-field checkbox-optional_fields_toggle">
         <input type="checkbox" id="toggle_optional_fields" class="input-block checkbox"">

lms/templates/verify_student/test/fake_softwaresecure_response.html

@@ -65,10 +65,10 @@ $(document).ready(function() {
             data: JSON.stringify(data),
             contentType: "application/json;",
             success: function () {
-               $('#success-info').html('status updated.');
+               $('#success-info').text('status updated.');
             },
             error: function(jqXHR, textStatus, errorThrown) {
-                $('#errors-info').html(jqXHR.responseText);
+                $('#errors-info').text(jqXHR.responseText);
             }
         });
     }

openedx/features/learner_profile/static/learner_profile/templates/badge_list.underscore

-<div class="sr-is-focusable sr-<%= type %>-view" tabindex="-1"></div>
-<div class="<%= type %>-paging-header"></div>
-<div class="<%= type %>-list cards-list"></div>
-<div class="<%= type %>-paging-footer"></div>
+<div class="sr-is-focusable sr-<%- type %>-view" tabindex="-1"></div>
+<div class="<%- type %>-paging-header"></div>
+<div class="<%- type %>-list cards-list"></div>
+<div class="<%- type %>-paging-footer"></div>

openedx/features/learner_profile/static/learner_profile/templates/badge_placeholder.underscore

@@ -5,6 +5,6 @@
   <div class="badge-details">
     <div class="badge-name"><%- gettext("What's Your Next Accomplishment?") %></div>
     <p class="badge-description"><%- gettext('Start working toward your next learning goal.') %></p>
-    <a class="find-course" href="<%= find_courses_url %>"><span class="find-button-container"><%- gettext('Find a course') %></span></a>
+    <a class="find-course" href="<%- find_courses_url %>"><span class="find-button-container"><%- gettext('Find a course') %></span></a>
   </div>
 </div>