Cherry pick security patches from 9.1.3 into `master` & `9-2-stable`
The fixes from #31341 should go into the current branches.
master
!11230 (merged)
CE & EE-
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2097 (2086) -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2098 (2088) -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2084 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2087 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2089 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2093 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2094 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2095 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2085 - Merged by @jschatz1 in https://gitlab.com/gitlab-org/gitlab-ce/commit/3aeae2c7fa22630edc8f1f29bbbdf0f7bb40e15e -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2096
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/1864
EE only-
https://dev.gitlab.org/gitlab/gitlab-ee/merge_requests/508 -
https://dev.gitlab.org/gitlab/gitlab-ee/merge_requests/509
9-2-stable
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/11234
-
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2097 (2086) -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2098 (2088) -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2084 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2087 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2089 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2093 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2094 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2095 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2085 -
https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2096