One more fix to the link creation helper to really escape the right stuff

app/helpers/application_helper.rb

@@ -137,12 +137,13 @@ module ApplicationHelper
       end
     end
     closed = issue.closed? ? content_tag(:span, l(:label_closed_issues), :class => "hidden-for-sighted") : ""
-    s = link_to "#{closed}#{h(options[:before_text].to_s)}#{h(issue.tracker)} ##{issue.id}".html_safe,
+    s = ActiveSupport::SafeBuffer.new
+    s << "#{issue.project} - " if options[:project]
+    s << link_to("#{closed}#{h(options[:before_text].to_s)}#{h(issue.tracker)} ##{issue.id}".html_safe,
                 issue,
                 :class => issue.css_classes,
-                :title => h(title)
+                :title => h(title))
     s << ": #{subject}" if subject
-    s = "#{issue.project} - " + s if options[:project]
     s
   end