Created attachment 205 [details] The data table search/filter field lacks input sanitization and accepts emojis. The global search field on the Vendors data table accepts non-standard characters, specifically emojis, without any client-side or server-side sanitization.