diff --git a/APPL/API/shorturl.asp b/APPL/API/shorturl.asp
index dbb6541f6e..f45ae29167 100644
--- a/APPL/API/shorturl.asp
+++ b/APPL/API/shorturl.asp
@@ -211,7 +211,7 @@ __Log("== Entering shorturl.asp ==");
         theURL = "appl/shared/refresher.asp?url=" + Server.URLencode("/?norefresh=1" + transitQS()) + "&refreshrate=" + refresher;
     }
     else
-        var theURL = url; // was mogelijk onnodig en misbruikbaar protectQS.create(url);
+        var theURL = protectQS.create(url);
 
     if (locked_bdradr_key < 0 && isKnownBookmark && !isMobile && getQParamInt("internal", 0) == 0)
     {