Since search_autocomplete_source rendered with raw all human input should be sanitized to prevent XSS
Sanitize user profile input