html escape the search terms