I changed a priv and got these:

Message on the page:
Old priv: 101 New <a href="wiki.html?name=privs">priv</a>: 99

In the URL
&message=Old%20priv%3a%20101%20New%20%3Ca%20href%3d%22wiki.html%3fname%3dprivs%22%3Epriv%3C%2fa%3E%3a%2099

The link gets spelled out literally, which shouldn't happen.