Prevent xss vulnerability

In case someone links to us like this index.html#some-
anchor%27%22%3E%3Cimg%20src=x%20onerror=alert%28/XSS/%29%3E
We strip out all those nefarious characters that will never
be part of a legit anchor. Thanks to issam rabhi for reporting
the vulerability.
Fix another xss vulerability in search box

If you enter <a onmouseover=prompt(document.cookie)>Click-me
in the search box, then the js runs. Stripping out more characters from
the input to combat this.
Merge pull request #104 from dwcramer/xss-fixes

Xss fixes