Do not expose server-side configuration
Do not expose server-side configuration

Currently, the server-side XBlock configuration (including OpenStack
credentials) is exposed via "Staff debug info" in the student view.

Since there's no need to store this in the database (it is loaded on
every instance render), avoid this security hole by not making
self.configuration an XBlock field instance, and instead parsing
configuration on every request.

arbrandes/hastexo-xblock,hastexo/hastexo-xblock,hastexo/hastexo-xblock,arbrandes/hastexo-xblock,hastexo/hastexo-xblock,arbrandes/hastexo-xblock,arbrandes/hastexo-xblock,hastexo/hastexo-xblock,arbrandes/hastexo-xblock