Merge pull request #2737 from Icinga/bugfix/searchfield-escaping-12330

FilterEditor: escape values correctly

library/Icinga/Web/Widget/FilterEditor.php

@@ -521,7 +521,7 @@ class FilterEditor extends AbstractWidget
         return sprintf(
             '<input type="text" name="%s" value="%s" />',
             $this->elementId('value', $filter),
-            $value
+            $this->view()->escape($value)
         );
     }