Filters apply as you choose them.
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack