escape search results

static/script.js

@@ -125,7 +125,7 @@ function search(query) {
 				var title = entries[i].title.$t;
 				var id = entries[i].media$group.yt$videoid.$t;
 				var html = '<li id="r_' + id + '">';
-				html += '<a href="javascript:add(\'' + id + '\', \'' + title + '\')">';
+				html += '<a href="javascript:add(\'' + id + '\', \'' + escape(title) + '\')">';
 				html += '<img src="http://i.ytimg.com/vi/' + id  + '/1.jpg" alt="' + id + '">';
 				html +=	title;
 				html += '</a></li>';