Gitlab.com is vulnerable to reverse tabnabbing via AsciiDoc links. (#3)

Dear GitLab bug bounty team, # Summary --- Gitlab.com is vulnerable to reverse tabnabbing in AsciiDoc files. # Why does this vulnerability exist? --- In AsciiDoc the following `http://example.com[Reverse Tabnabbing^]` is equivalent to `<a href="http://example.com" target="_blank">Reverse Tabnabbing</a>`. # How can this exploited? --- Same scenario as https://hackerone.com/reports/211065. ;) Best regards, Ed