uerySelectorAll('*'))\n\n  for (const element of elements) {\n    const elementName = element.nodeName.toLowerCase()\n\n    if (!Object.keys(allowList).includes(elementName)) {\n      element.remove()\n      continue\n    }\n\n    const attributeList = [].concat(...element.attributes)\n    const allowedAttributes = [].concat(allowList['*'] || [], allowList[elementName] || [])\n\n    for (const attribute of attributeList) {\n      if (!allowedAttribute(attribute, allowedAttributes)) {\n        el...

        final String[] extraQueries = request.getParameterValues("ex_q");
        if (extraQueries == null || extraQueries.length == 0) {
            return new String[0];
        }
        // Build allowlist from configured facet queries
        final List<FacetQueryView> facetQueryViewList = ComponentUtil.getViewHelper().getFacetQueryViewList();
        final Set<String> allowedQueries = new java.util.HashSet<>();