Bug 13510 - Cross site scripting bug in opac-downloadshelf and opac-shelves