GitLab disclosed on HackerOne: Stored XSS in custom emoji

### Summary I found Stored XSS with a feature of custom emoji. This feature hasn't been rolled out yet and need to set feature flags in self management installation. ( https://gitlab.com/gitlab-org/gitlab/-/issues/231317 ) The problem is the code here. https://gitlab.com/gitlab-org/gitlab/-/blo…