Escape search term to prevent XSS.

I believe this should only affect how we render the search term in the
UI. It will escape characters so we can ensure we don't execute any
XSS-type attacks.