in api/search.js [41:43]
function escapeHtml(str) { return str.replace(/</g, "<").replace(/>/g, ">"); }