Mergeback PR from private to public.

fixes for xss lint issues

Mergeback PR from private to public.

Fixed xss linter issue

Fixes xss linter issue

add logs for debugging

This reverts commit 70600d79.

Change edx.org theme to use program slug

remove useless-supression warnings - BOM-1353

CRI-196 Quiet deprecation warnings from imp and courseware modules

Fixes hidden tabs showing up in courseware MFE.

As it is explained in courseware/__init__.py:

    Importing 'lms.djangoapps.courseware' as 'courseware' is no longer
    supported

This warning, while relevant, decreased the signal/noise ratio when
investigating the lms logs.

The "bulk_email" app was the only remaining app importing the courseware
module incorrectly. All edx-platform modules and dependencies now follow
the new convention.

This is in part for CRI-196.

The "imp" module is deprecated and should be replaced by "importlib". As
a consequence, loading the django settings used to raise deprecation
warnings:

    DeprecationWarning: the imp module is deprecated in favour of
    importlib; see the module's documentation for alternative uses

It should be noted that python 3.5.1 ships with an older release of
distutils which still relies on the imp module. Thus, users of python
3.5.1 (for instance: edx.org developers) will continue to see the
deprecation warning for some time, despite this patch. We suggest
upgrading to python 3.5.9.

This addresses part of CRI-196.

In the case that that are order dependent failures on Jenkins, this
script can be used to automatically find the minimal set of tests
required to continue to test the failure locally.

Reduce upselling on Dates tab

The dates tab has a lot of redundant calls to action around
upgrading to verified track. This replaces them with a single
banner at the top of the page.

AA-102

Only show the resets date banner if you have missed the due date on a…

Refactors courseware metadata code.
Enables masquerading in the courseware metadata API.

[AA-138]

Cache Blockstore XBlock field data per thread, not per-process

REST API for managing Content Library bundle links

* fix get_worker_test_list.py

The test name is not always at the same index in the line, so pull
it from the regex instead.

PROD-1480

Also changed `password_reset` endpoint rate limit configuration to
1/minute from 30/5 minutes.

PROD-1427

It doesn't look like this setting was required, and because it didn't
use override_settings, it broke other tests.

* Commits:
  Stop skipping chromeless iframe resize onload event

in the case where the MutationObserver has already tried resizing the
iframe prior to it fully loading.

Python Requirements Update

TNL-7148 -- support external links in courseware API