CVE-2018-16362 - XSS in Manage Repository and Changesets List pages

[dregad]

@atrol reported an XSS vulnerability in repo_manage_page.php and list.php

Steps to reproduce:

1. Create a new repository, set all text fields to <script>alert('XSS');</script>
2. Save changes, the Manage Repository page executes the code (or reports CSP violations)
3. Click on Browse to navigate to Changesets page for more code execution.

CVE request pending.

[dregad]

CVE-2018-16362 assigned