CVE-2019-11556

Pagure before 5.6 allows XSS via the templates/blame.html blame view...