Escape project's name in cross project label

app/helpers/labels_helper.rb

@@ -65,7 +65,7 @@ module LabelsHelper
 
   def render_colored_cross_project_label(label)
     label_suffix = label.project.name_with_namespace
-    label_suffix = " <i>in #{label_suffix}</i>"
+    label_suffix = " <i>in #{escape_once(label_suffix)}</i>"
     render_colored_label(label, label_suffix)
   end