todo localization
Fix XSS issues in filter api