Are Seam s:link and s:button tags XSS attack safe in JBoss EAP 5.1?

Issue

• As per the web site vulnerability standards following characters should not be part of URL "(",")"

• While clicking on links generated using

    s:link propagation="end" rendered="#{loginUser.isAdmin}"
    view="/secured/admin/order/approveOrder.seam" 
    action="#{manageOrderAction.getOrderPage()}">
    <h:outputText value="#{messages['userHeader.adminHome']} |" 

• We are seeing characters "(" and ")".Is this XSS (Cross Site Scripting) safe?