Shortcode in custom link URL field problem

Hi, with your filter “add_action( ‘wp_loaded’, array( $this, ‘security_check’ ) );” you allow shortcodes in a URL link field. Unfortunately this is only allowed for users with the “activate_plugins” capability. Now if an editor just clicks save on the menu, all shortcodes will be sanitized. Would you please remove the permission or change it to “edit_posts”.

Thanks and best regards
Markus