Koha was not previously escaping CGI input, which caused problems for highlighting and is a security issue. Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de> Thx for fixing this. Signed-off-by: Jared Camins-Esakov <jcamins@cpbibliography.com>