properly escape suggestions query