Kandemir

The issue exists due to the presence of a cross-site scripting (XSS) flaw. This flaw can be exploited by adding a branch under the Branches button and setting the `notes` parameter with crafted JavaScript code.

The issue concerns a problem where the `username` parameter in the User component has XSS.