Fixed bug #12739: XSS in shortcuts (thanks to Francois Suter and Georg Ringer)