fixed potential XSS issue on backend when using map shortcodes