Change from hybrid to JSON cookies serializer

Closes #171

See merge request gitlab-org/security/gitlab!641

JSON has been the default serializer since Rails 4.1. Hybrid
serializer was meant to allow backward compatibility when
upgrading pre-Rails 4.1. It's been some time since we upgraded
to Rails 4.1 so now we don't need the hybrid serializer anymore.
This also causes security concerns since the previous serializer
was Marshal.

Stored XSS on the Error Tracking page

Closes #145

See merge request gitlab-org/security/gitlab!563

Upgrade swagger-ui to solve XSS issues

Closes #170

See merge request gitlab-org/security/gitlab!577

Validate group names with Rails HTML sanitizer

Closes #149

See merge request gitlab-org/security/gitlab!572

Fix XSS in Banzai's `#data_attributes_for`

Closes #150

See merge request gitlab-org/security/gitlab!576

Update xterm js dependency to latest stable 3.X version

Closes #128

See merge request gitlab-org/security/gitlab!501

Update permissions for time tracking endpoints

Closes #153

See merge request gitlab-org/security/gitlab!587

Update Kaminari gem

Closes #152

See merge request gitlab-org/security/gitlab!575

Make sure user info is sanitized when rendered

Closes #151

See merge request gitlab-org/security/gitlab!579

Security fix project authorizations for security dashboard

Closes #144

See merge request gitlab-org/security/gitlab!561

Fixes pypi XSS

Closes #141

See merge request gitlab-org/security/gitlab!555

Remove append-right-48 utility class

See merge request gitlab-org/gitlab!35545

Clarify use of private, public, internal groups

Closes #211811

See merge request gitlab-org/gitlab!35439

Improve docs related to LDAP membership lock

Closes #217478

See merge request gitlab-org/gitlab!35332

Static Site Editor can’t be opened in projects belonging to a subgroup

See merge request gitlab-org/gitlab!35378

This removes the append-right-48
utility class, no replacements were needed

Fix spelling mistakes

See merge request gitlab-org/gitlab!35321

Fix VSA code stage query

See merge request gitlab-org/gitlab!35324

Update docs for group/instance-level security dash

See merge request gitlab-org/gitlab!35533

Resolve "Display non-markdown content in the WYSIWYG mode of the SSE::Identifiers"

Closes #221082

See merge request gitlab-org/gitlab!35077

Add initial custom renderer for the markdown
identifier syntax (reusable links and desc).
Minor refactor to render signatures too due
to need for node not just context.

Forward correlation ID to Elasticsearch as X-Opaque-Id header

See merge request gitlab-org/gitlab!35403

Ensure .git/config is updated for forks

See merge request gitlab-org/gitlab!35305

Update Terraform docs, fix multiple typos

See merge request gitlab-org/gitlab!35399

Defer updating .git/config for imported projects

See merge request gitlab-org/gitlab!35308

Resolve "Add no graph empty state for DAG"

See merge request gitlab-org/gitlab!35053

We add a new empty state to the graph
so that we can redirect users to the
job dependencies documentation and
educate them on this architecture.
This should only appears when there
is not enough data to render the graph
and there are no errors while parsing the
data.

Update GitLab UI/SVG

See merge request gitlab-org/gitlab!35457

Docs: switch order to match AWS IAM setup

See merge request gitlab-org/gitlab!35250

Explicitly give `override` for `EE::Project#feature_available?`

See merge request gitlab-org/gitlab!35520

- update screen shots

Add note suggesting best practice for address used

See merge request gitlab-org/gitlab!34874