Issue #2248433 by sylus: SA-CONTRIB-2014-043 - Custom Search - Cross Site Scripting (XSS).