Fixed XSS vulnerability in search suggestions