Task gantt popup xss

Task and Project links in the Gantt popup are built with get_form_link, which closes an XSS hole.