make hg link secure

--HG--
branch : 3.4
extra : source : 301c672ceca6b07c9fc9183acc0cbff260791775
merge 3.4