Scenario:

• activate a plugin that modifies charset
• create short URLs
• deactivate the plugin
• you're f*cked.

See #2280 for example.

Solution: creating a short URL should check and sanitize things against the accepted charset. Displaying or following short URLs should just deliver what is stored in the DB