Cross-site Scripting

gitlab is vulnerable to Cross-site Scripting. The vulnerability is due to there is no proper input sanitization of usernames, this allows an attacker to craft arbitrary API PUT requests and potentially leads to Cross-site Scripting...