XSS issue in filter parameter

Please refer to the support ticket CRC-807. There is a XSS issue when generating the Crucible filter with the following URL.

For example;

• http://localhost:8060/cru/?filter=%3c/style%3e%3cscript%3ealert(document.cookie)%3c/script%3e

which will execute a javascript pop up with cookie information. See the attached screen shot

This is not reproducible in Crucible 2.0.