Ensure $search and $replace are properly escaped in the HTML returned from get_report()