Merge branch 'security-11-7-55320-stored-xss-in-user-status' into 'security-11-7'
[11.7] Use sanitized user status message in user popover See merge request gitlab/gitlabhq!2839 (cherry picked from commit e5d355eb04e165fa1b9ccce1253b909a785d4bed) 21e70bba Use sanitized user status message for user popover