bolt/bolt — pull request #475 by k42b3 (2013-06-15 10:47:24+00:00)
Title: Escape search output

If you make a search the output is not properly escaped so you can insert html tags into the markup i.e.

/search?search=foo%3Cscript%20type=%22text/javascript%22%3Ealert%28%27Oo%27%29%3B%0A%0A/*
/search?search=foo%3Cmarquee%3E

the search is sanitized means that does not lead directly to an XSS problem but as shown in the example this could be abused or maybe bypassed. Its probably safer to simply escape the output