GHSA-6HCJ-QRW3-M66Q Fava vulnerable to reflected cross-site scripting

Fava before 1.22.3 is vulnerable to reflected cross-site scripting due to improper validation on filter conversion...