Escape HTML entities in the Google API URL

www/index.php

@@ -61,7 +61,7 @@ $params = array(
 if (!empty($apiKey)) {
     $params['key'] = $apiKey;
 }
-$page->addScript('//www.google.com/jsapi?' . http_build_query($params));
+$page->addScript(htmlspecialchars('//www.google.com/jsapi?' . http_build_query($params)));
 $page->addStyleSheet('css/search.css');
 
 //u is referring site