fixes bug 1019679 - Possibility of XSS attack on Advanced Filtering, r=@camd