Filters apply as you choose them.
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.