Merge pull request #15094 from frappe/search-injection-fix

prevent jinja exec in search title