Pick 10.2.4 security fixes into master (EE port)

See merge request gitlab-org/gitlab-ee!3699

Port of !12148 to EE

See merge request gitlab-org/gitlab-ee!3657

prevent potential XSS when editing comment

See merge request gitlab/gitlabhq!2238

(cherry picked from commit 80ed6d25a46c0f70ec8baea78b5777118d63876c)

7480e462 prevent potential XSS when editing comment

Prevent creating issues through API without having permissions

See merge request gitlab/gitlabhq!2225

(cherry picked from commit c298bbaa88883343dc9cbbb6abec0808fb3b546c)

915b97c5 Prevent creating issues through API without having permissions

[10.2] Ensure we expose group projects using GroupProjectsFinder

See merge request gitlab/gitlabhq!2234

(cherry picked from commit 072f8f2fd6ec794645375a16ca4ddc1cbeb76d7a)

a2240338 Ensure we expose group projects using GroupProjectsFinder

(10.2) Avoid partial partial email adresses for matching

See merge request gitlab/gitlabhq!2232

(cherry picked from commit 081aa1e91a777c9acb31be4a1e76b3dd7032fa9a)

There are unresolved conflicts in app/models/user.rb.

fa85a3fd Don't allow searching for partial user emails

Fixes project visibility guidelines

See merge request gitlab/gitlabhq!2226

(cherry picked from commit 877c42c0aaf3298d6001614c9706bc366ae4014c)

e4fd1c26 Ensure project wiki visibility guidelines are met

Merge branch 'ee-29483-no-feedback-when-checking-on-checklist-if-potential-spam-was-detected' into 'master'

Port of 29483-no-feedback-when-checking-on-checklist-if-potential-spam-was-detected to EE

See merge request gitlab-org/gitlab-ee!3680

Fix/gb/fix pipeline build chain tag evaluation ee

See merge request gitlab-org/gitlab-ee!3686

Port of "es-module-compare" to EE

See merge request gitlab-org/gitlab-ee!3668

Clean up config docs for Geo

Closes #4287

See merge request gitlab-org/gitlab-ee!3697

Port from CE: Allow git pull/push on project redirects

See merge request gitlab-org/gitlab-ee!3666

Bump redis-rails to 5.0.2 to get redis-store security updates

Closes #40889

See merge request gitlab-org/gitlab-ce!15773

More details about troubleshooting inactive replication slot

See merge request gitlab-org/gitlab-ee!3688

Document Geo HA

Closes #3646

See merge request gitlab-org/gitlab-ee!3468

When a postgresql replication slot is not active, one should not just delete it.
Instead ask themselves, should it be active and if so, why isn't it active.

If they intent to not use it, they can remove it.

Add docs on tuning Geo for parallelism

See merge request gitlab-org/gitlab-ee!3665

Transfer job archives after creation

See merge request gitlab-org/gitlab-ee!3646

Resolve "Geo - Send GitLab version in status page and verify that all versions are the same"

Closes #2115

See merge request gitlab-org/gitlab-ee!3667

Port of mk-add-old-attachments-to-uploads-table to EE

See merge request gitlab-org/gitlab-ee!3401

Fix message when pushing to Geo secondary

Closes #3945

See merge request gitlab-org/gitlab-ee!3616

Use relative _path helper URLs in the GitLab UI -- EE merge edition

Closes gitlab-ce#40825

See merge request gitlab-org/gitlab-ee!3676