Use only escaped auto_link

app/helpers/application_helper.rb

@@ -259,4 +259,8 @@ module ApplicationHelper
 
     super
   end
+
+  def escaped_autolink(text)
+    auto_link ERB::Util.html_escape(text), link: :urls
+  end
 end

app/views/groups/show.html.haml

@@ -24,7 +24,7 @@
           = @group.name
         - if @group.description.present?
           %p
-            = auto_link @group.description, link: :urls
+            = escaped_autolink(@group.description)
     = render "projects", projects: @projects
     - if current_user
       .prepend-top-20

app/views/projects/_home_panel.html.haml

@@ -3,7 +3,7 @@
   .project-home-row
     .project-home-desc
       - if @project.description.present?
-        = auto_link ERB::Util.html_escape(@project.description), link: :urls
+        = escaped_autolink(@project.description)
       - if can?(current_user, :admin_project, @project)
         –
         = link_to 'Edit', edit_project_path