Shell characters problem allow javacript execution in local zone.
vulners.com/securityvulns/securityvulns:doc:5878
vulners.com/securityvulns/securityvulns:doc:5879