Grid_Advanced: security fix

It was possible to inject HTML code in grid shorttext column title attribute.