Merge branch 'djadmin-forbid-form-tag' into 'master'

DOMPurify: Disallow form tag by default

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/102973



Merged-by: Andrew Fontaine <afontaine@gitlab.com>
Approved-by: Ammar Alakkad <aalakkad@gitlab.com>
Approved-by: Mark Florian <mflorian@gitlab.com>
Approved-by: Andrew Fontaine <afontaine@gitlab.com>
Approved-by: Dominic Couture <dcouture@gitlab.com>
Co-authored-by: Dheeraj Joshi <djoshi@gitlab.com>