Better escaping in various repositories places

• Git version: 2.11.0
• Database (use [x]):
  • PostgreSQL
  • MySQL
  • MSSQL
  • SQLite
• Operating system: Debian Stretch
• Gitea version (or commit ref): 1.4.1
• Can you reproduce the bug at https://try.gitea.io:
  • Yes (provide example URL)
  • No
  • Not relevant
• Log gist:

Description

Screenshots

[lafriks]

Can you please send details to security@gitea.io ?

[jonasfranz]

@lafriks @ghost I close this issue assuming that it got already fixed.