Add a filter to the tree view to display only CMS pages

potenciel SQL injection here