KML Reflector servlet not html-escaping cql filter clauses

org.vfny.geoserver.wms.servlets.KMLReflector does not escape CQL filters before rendering them into the networklink kml file returned. The following cql filter will cause it to choke:

CQL_FILTER=heading%3E3

Even though the original filter may have had the filter escaped, line 203 the text is not escaped anymore, i.e. it equals:

CQL_FILTER=heading>3

and that is the text that is put into the networklink kml file returned. I have tested "re-escaping" the CQL filter at line 203 and it seems to work. Not sure what the full and correct solution should be but can submit patch if desired.