userlogin/assets/js/scripts.js is not part of Moodle.
Which XML files are you worries about? There aren't many in Moodle, any anyway all the Moodle code is on github: https://github.com/moodle/moodle
Security and privacy
Moodle 2.9 apache can access moodle files
This discussion has been locked so you can no longer reply to it.