XSS flaw correction

Closes issue https://github.com/sebsauvage/Shaarli/issues/134