Escape the source branch link correctly

Merge branch 'security-xss-merge-request-fork' into 'master'

See merge request gitlab-org/security/gitlab!3229

Changelog: security