Util : do not decodeURIComponent(content) within message(content, duration) function
Search plugin : protect against javascript injection in search bar