Fix: Fixed possible stored CSRF vulnerabilities.

When displaying flash messages or link tooltips it was possible to perform stored CSRF attack by crafting malicious object properties (group name, filter name, etc.)

(Redmine issue: #3443)