harvesthq/chosen — pull request #1867 by presidentbeef (2014-04-02 16:47:55+00:00)
Title: Escape terms when no results are found (in JQuery)

Escape the input terms when displaying the "no results found" message to prevent XSS.

There does not appear to be a good way to do this in Prototype.