diff -u modules/shortcut/shortcut.module modules/shortcut/shortcut.module
--- modules/shortcut/shortcut.module	24 Feb 2010 20:40:33 -0000
+++ modules/shortcut/shortcut.module	24 Feb 2010 22:13:50 -0000
@@ -264,17 +264,18 @@
   global $user;
 
   if (user_access('administer shortcuts')) {
-    // Admins can switch anyone's shortcut set.
+    // Administrators can switch anyone's shortcut set.
     return TRUE;
   }
 
   if (!user_access('switch shortcut sets')) {
-    // User has no permission to switch anyone's shortcut set.
+    // The user has no permission to switch anyone's shortcut set.
     return FALSE;
   }
 
-  if (!isset($account) || $user->uid = $account->uid) {
-    // Users with switch shortcut sets permission can switch own set.
+  if (!isset($account) || $user->uid == $account->uid) {
+    // Users with the 'switch shortcut sets' permission can switch their own
+    // shortcuts sets.
     return TRUE;
   }
 
@@ -722,5 +723,5 @@
  */
 function shortcut_set_title($shortcut_set) {
-  return $shortcut_set->title;
+  return check_plain($shortcut_set->title);
 }
 
