SearchKit - Correctly process filters passed through Afform from js

[colemanw]

Overview

Fixes a regression caused by #21388

Before

Could not pass filters as javascript variables to search displays.

After

Works.

[civibot]

(Standard links)

• If this is your first pull-request for CiviCRM, please browse CONTRIBUTING.md for information about the development and testing processes.
• If you are reviewing this pull-request, you may wish to consult the test sites and the Review Standards (long template, short template).

[colemanw]

retest this please

[eileenmcnaughton]

@colemanw this is code that has just changed so ok to change again - but I don't understand how to be sure that nothing insecure is being permitted here as it seems to loosen restrictions

[colemanw]

@eileenmcnaughton it does loosen restrictions (back to the way it was pre-regression) but still within the bounds of the Afform. The security comes from the fact that only filters present on the Afform are allowed. We can trust the Afform because it is stored on the server, not coming from the client.

[eileenmcnaughton]

Ok....