[bug 1068606] Fix XSS issue in instant search

r?