Fix potential xss in bootstrap typeahead. Thanks @modlearning