get the multi filter labels feature to work on merge request, also escape characters in the templates to prevent xss attack