Sanitize and bound web_search inputs

fix(global_search): sanitize and bound web_search inputs