diff --git a/tools/droiddoc/templates-sdk/assets/js/docs.js b/tools/droiddoc/templates-sdk/assets/js/docs.js
index c4a8150..ee3ebee 100644
--- a/tools/droiddoc/templates-sdk/assets/js/docs.js
+++ b/tools/droiddoc/templates-sdk/assets/js/docs.js
@@ -2546,7 +2546,7 @@
 }
 
 function submit_search() {
-  var query = document.getElementById('search_autocomplete').value;
+  var query = escapeHTML(document.getElementById('search_autocomplete').value);
   location.hash = 'q=' + query;
   searchControl.query = query;
   searchControl.init();
@@ -2617,7 +2617,7 @@
   this.searchInputEl_.keyup(this.debounce_(function(e) {
     var code = e.which;
     if (code != 13) {
-      this.query = this.searchInputEl_.val();
+      this.query = escapeHTML(this.searchInputEl_.val());
       location.hash = 'q=' + encodeURI(this.query);
       this.searchResultEl_.empty();
       this.getResults_();
@@ -2800,7 +2800,7 @@
     return;
   } else {
     // first time loading search results for this page
-    searchControl.query = decodeURI(location.hash.split('q=')[1]);
+    searchControl.query = escapeHTML(decodeURI(location.hash.split('q=')[1]));
     searchControl.init();
     searchControl.trackSearchRequest(searchControl.query);
     $('#searchResults').slideDown('slow', setStickyTop);