Sanitise low search keywords

Question

What's a good method for stripping HTML from our site search? I've found that it's possible to inject HTML directly into our page like this:

https://website.co.uk?keywords="<svg/onload%3Dconfirm(//)>

The page source then looks like this:

Answer 1

I posted the same question here and got a fix. We were using {get:keywords} when we should have been using {low_search_keywords}. That tag sanitises HTML for you. Hope that helps someone...