more better escaping for search controller