Searching for 'mostek' returns: <span class="highlight">Mostek</span> was an integrated... That html should not be escaped.
Maybe the pancake-search app should not include the span? It is probably better if the FE does not accept any html at all?
I think this is a FE problem. We didn't see it previously, because the highlight flag was set to False. I'm going to turn off the highlighting until I can find a solution for the FE escaping.
Turned off highlighting: https://bitbucket.org/mozillapancake/pancake/changeset/07594892f33c
We probably want to move the transformation of those markers to the FE. Avoids a potential XSS vector.