Update telebot/formatting.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: Badiboy

telebot/formatting.py

@@ -599,7 +599,7 @@ def create_html_tag(self, entity, content: str) -> str:  # entity: MessageEntity
         # Prepare format arguments
         format_args = {"text": content}
         if entity_type == "text_link":
-            format_args["url"] = entity.url or ""
+            format_args["url"] = escape_html(entity.url or "")
         elif entity_type == "custom_emoji":
             format_args["custom_emoji_id"] = entity.custom_emoji_id or ""