All filters should be whitelisted via "filters" option. But it doesn't work for nested filters. Assume we have "User" entity that has many-to-one association with "City" entity that has fields "name" and "country". If we whitelist "city" filter for user list endpoint all nested filters will be available regardless to filters whitelisted for cities list endpoint. So next filters will work: "city", "city.name", "city.country". And this behavior doesn't match default behavior for plain filters.
All filters should be whitelisted via "filters" option. But it doesn't work for nested filters. Assume we have "User" entity that has many-to-one association with "City" entity that has fields "name" and "country". If we whitelist "city" filter for user list endpoint all nested filters will be available regardless to filters whitelisted for cities list endpoint. So next filters will work: "city", "city.name", "city.country". And this behavior doesn't match default behavior for plain filters.