[gitlab: Content injection via username]
https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
