Whitelist the "target" link attribute in the XSS filter
Exclude SSLv3 from Gitblit GO https protocols