Filters apply as you choose them.
invenio-communities before 1.0.0a20 allows XSS.
invenio-previewer before 1.0.0a12 allows XSS.