Filters apply as you choose them.
Cervantes through 0.5-alpha accepts insecure file uploads.
Cervantes through 0.5-alpha allows stored XSS.