Filter query string from the UI

We only have (latin) package/variable/method names, so use valid
characters. Filter the rest by turning them into spaces (to improve
matching)