SECURITY: UserGroupMembership: Fix HTML escaping in #getLink