Fixes #362 and #401. 

Avoid duplicate sources while importing OPML.
Prevent reflected XSS vulnerability in search form.