#182 Sanitize user input in shortcode