Bug 14418: XSS flaw in opac-shelves.pl