[11.6] Escape label and milestone titles to prevent XSS in GFM autocomplete See merge request gitlab/gitlabhq!2740