Changing user name to `">` causes a JavaScript error on MergeRequests#show
- Go to profile settings and change your name to
"><svg/onload=alert(document.domain)> - Go to the MR page.
- In the console you'll see a JS error because of the JSON that is returned for the user:
{"id":1,"name":"">","username":"root"}