New Hamlit XSS fix, does not include extraneous changes

See merge request !509

Respect project features when searching alternative branches with elasticsearch enabled

See merge request !508

Use GroupsFinder to find subgroups the user has access to

See merge request !2096

New Hamlit XSS fix, does not include extraneous changes

See merge request !2095

Refactor snippets finder & dont return internal snippets for external users

See merge request !2094

Fix XSS in branches dropdown

See merge request !2093

Respect project features in wiki and blob search

See merge request !2089

Fix snippets visibility for show action - external users can not see internal snippets

See merge request !2087

Sanitize submodule URLs before linking to them in the file tree view

See merge request !2084

(security-9-1) Add correct `rel` attributes to external links when rendering markdown

See merge request !2097

(security-9-1) Render asciidoc & other markup using banzai in a pipeline

See merge request !2098

Fix icons path and mappings

See merge request !1862

CE upstream

Closes omnibus-gitlab#2234 and gitlab-ce#31271

See merge request !1837

This reverts commit 8785aa64.

Fix Timecop not unfreezing after spec

Closes #2362

See merge request !1847

Closes #2362 for real

Merge request widget redesign (EE Version)

Closes #2362

See merge request !1711

Fix notes_on_personal_snippets_spec EE

See merge request !1846

Fix sub-second timing comparison error for Devise confirmation period

Closes #2362

See merge request !1843

Fix notes_on_personal_snippets_spec EE

See merge request !1846

Add a CE to EE migration guide for 9.2

See merge request !1845