Escape the query string before display

Escape the query string before displaying it in the search input
field.

Signed-off-by: Jeff Godin <jgodin@tadl.org>