Fix #1362 Range filter sets 'To' to 'From' when 'From' left empty
html escape user input
Merge pull request #1367 from dennishendriksen/master

Fix #1362 Range filter sets 'To' to 'From' when 'From' left empty