This bug is not currently tracked.
I think our tests atm request search results only as JSON. That avoids a branch in app.search which we just had a crasher in. Add a test for that path. Check the rest of the coverage while we're at it; I wonder how we're doing.