If user input for a search field is "submitted" via javascript rather than the asp form postbacks (basically the same as validateRequest=false), what should be done to sanitize the input before it is used to generate a query to the Microsoft Indexing Service.
Is HtmlEncode appropriate?
...
Go to the complete details ...