bug 3652 fixing XSS vulnerabilities in opac-search