Don't directly inject $_GET parameters in html.
Don't directly inject $_GET parameters in html.

The Search module created a canonical tag containing a directly injected
$_GET parameter. This commit makes sure we encode specialcharacters
making XSS impossible. Fixes #1018

dmoerman/forkcms,tommyvdv/forkcms,nosnickid/forkcms,bartdc/forkcms,DegradationOfMankind/forkcms,mathiashelin/forkcms,DegradationOfMankind/forkcms,riadvice/forkcms,jessedobbelaere/forkcms,carakas/forkcms,Saxithon/gh-pages,jeroendesloovere/forkcms,ikoene/forkcms,forkcms/forkcms,jeroendesloovere/forkcms,jeroendesloovere/forkcms,riadvice/forkcms,Katrienvh/forkcms,jessedobbelaere/forkcms,vytenizs/forkcms,jessedobbelaere/forkcms,Katrienvh/forkcms,riadvice/forkcms,justcarakas/forkcms,nosnickid/forkcms,DegradationOfMankind/forkcms,bartdc/forkcms,nosnickid/forkcms,jacob-v-dam/forkcms,vytenizs/forkcms,Thijzer/forkcms,tommyvdv/forkcms,vytenizs/forkcms,sumocoders/forkcms,mathiashelin/forkcms,Thijzer/forkcms,carakas/forkcms,wengyulin/forkcms,jonasdekeukelaere/forkcms,jacob-v-dam/forkcms,jonasdekeukelaere/forkcms,vytsci/forkcms,mathiashelin/forkcms,sumocoders/forkcms,dmoerman/forkcms,matthiasmullie/forkcms,justcarakas/forkcms,sumocoders/forkcms,forkcms/forkcms,sumocoders/forkcms,sumocoders/forkcms,tommyvdv/forkcms,Saxithon/gh-pages,DegradationOfMankind/forkcms,ikoene/forkcms,jacob-v-dam/forkcms,wengyulin/forkcms,riadvice/forkcms,Katrienvh/forkcms,carakas/forkcms,Katrienvh/forkcms,justcarakas/forkcms,jessedobbelaere/forkcms,vytsci/forkcms,forkcms/forkcms,jonasdekeukelaere/forkcms,Thijzer/forkcms,matthiasmullie/forkcms,jacob-v-dam/forkcms,carakas/forkcms,mathiashelin/forkcms,bartdc/forkcms,ikoene/forkcms,dmoerman/forkcms,tommyvdv/forkcms,matthiasmullie/forkcms,jonasdekeukelaere/forkcms,forkcms/forkcms,carakas/forkcms,vytsci/forkcms,jonasdekeukelaere/forkcms,jeroendesloovere/forkcms,wengyulin/forkcms