Cross-site scripting vulnerability fix
Security fix: check user inputs before creating a view for search