From magnus@therning.org

This means that searching for any string containing a quote (") fails.  It also means that searching for

 "><script>alert('hello');</script>

is fun.