poc for xss pwn gitlab latest 12/16/2013