Update search.js

escaping the query