sanitizing SearchServlet