gitlab-org--gitlab-foss/changelogs/unreleased/security-fix-markdown-xss.yml

---
title: Make sure HTML text is always escaped when replacing label/milestone references.
merge_request:
author:
type: security
Re-escape whole HTML content instead of only match When we un-escape HTML text to find references in it, we should then re-escape the whole text again, not only found matches. Because we replace matches with milestone/label links (which contain HTML tags we don't want to escape again), we re-escape HTML text with placeholders instead of these links and then replace placeholders in the escaped text. 2019-08-16 04:22:57 -04:00			`---`
			`title: Make sure HTML text is always escaped when replacing label/milestone references.`
			`merge_request:`
			`author:`
			`type: security`