[11.5] Escape label and milestone titles to prevent XSS in GFM autocomplete See merge request gitlab/gitlabhq!2741