Skip to content

Highlights in search dropdown are escaped after 9.1.3

Summary

In the dropdown, matching parts in search results should be highlighted (bold) but now they are escaped.

The 9.1.3 changelog mentioned some fixes for XSS so I guess that may be the reason?

Steps to reproduce

Type in the top right search box and wait for the dropdown to appear (Use substrings of your own project names for faster results).

What is the current bug behavior?

See the picture below.

What is the expected correct behavior?

What do you think? ;-)

Relevant logs and/or screenshots

A screenshot from this site:

image

Output of checks

This bug happens on GitLab.com and my own CE installation.

Possible fixes