Security issue 3
See
https://dev.gitlab.org/gitlab/gitlabhq/issues/2649