Merge branch '12-1-auto-deploy-20190721' into rs-merge-auto-deploy-security

changelogs/unreleased/security-60143-patch-additional-xss-vector-in-wikis.yml

+---
+title: Patch XSS issue in wiki links
+merge_request:
+author:
+type: security

changelogs/unreleased/security-bvl-filter-mr-params.yml

+---
+title: Filter merge request params on the new merge request page
+merge_request:
+author:
+type: security

changelogs/unreleased/security-dns-ssrf-bypass.yml

+---
+title: Fix Server Side Request Forgery mitigation bypass
+merge_request:
+author:
+type: security

changelogs/unreleased/security-fix-badges-leaked-to-unauthorized-users.yml

+---
+title: Show badges if pipelines are public otherwise default to project permissions.
+erge_request:
+author:
+type: security

changelogs/unreleased/security-hide_moved_issue_id.yml

+---
+title: Do not show moved issue id for users that cannot read issue
+merge_request:
+author:
+type: security

changelogs/unreleased/security-mr-pipeline-permissions.yml

+---
+title: Use source project as permissions reference for MergeRequestsController#pipelines
+merge_request:
+author:
+type: security

changelogs/unreleased/security-remove-take-trigger-ownership-feature.yml

+---
+title: Drop feature to take ownership of trigger token.
+merge_request:
+author:
+type: security