Rotozoom Product Filter Version 1.0.43
- Security: an attribute value whose name contains HTML is shown as text in the active-filter bar instead of being run as markup.
- Security: filter requests only consider the store's own product attributes, so a request with made-up attribute names can no longer make the server repeat catalogue queries.