doxygen: cross-site scripting in templates/html/search_opensearch.php

Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe injection...