Issue #2547741 by stefan.r, harjotsingh, sdstyles, Wim Leers: Introduce FilteredString and get rid of all SafeMarkup::set() calls in the Filter module