fix html escaping in search placeholder text

This fixes a tiny bug. I would have committed it directly but I understand that 2.1.0 will be released today so I did not want to throw in random stuff so I created this pull request instead.

To reproduce the issue, create an instance with `"` in the title.