Stored XSS in Notes (with CSP bypass for gitlab.com) https://hackerone.com/reports/1481207 1.8K views13:37