fix XSS bug in searchView