Use esc_url() where esc_attr() was incorrectly used in activity/blogs/groups components. Also escape $link when it's fed into bp_activity_thumbnail_content_images() directly.

git-svn-id: https://buddypress.svn.wordpress.org/trunk@7349 cdf35c40-ae34-48e0-9cc9-0c9da1808c22