Issue #2918762 by mikeker, tatarbj: XSS issues with "Enable secondary exposed form options" for users with Administer Views permissions