[BUG] Unencoded Content in Search Leads to JavaScript Execution Risk in autocomplete-js

[wjhwjhn]

Describe the bug 描述你遇到的错误

When performing a search, if the previewed article contains <script> tags, passing it to autocomplete-js results in the execution of the script.

Expected behavior 期待的行为

Before adding the <${highlightTag}> markers, encode the article content using the encodeURIComponent function.
Reference location: theme.js L237

Screenshots 屏幕截图

Follow the steps to reproduce and alert box pops up displaying "1".

The location that causes code execution, in autocomplete-js

Build Environment 构建环境

• OS: Ubuntu
• Theme commit: v0.3.2-RC
• Hugo version: v0.122.0

Preview Environment 预览环境

No response

Additional Information 补充信息

Steps to Reproduce

1. Insert an article containing a <script> tag. For example:

   # TEST
   
   ```html
   <script>
    alert("1");   
   </script>
   ```

2. Search for "TEST" within the article.

3. A browser alert box pops up displaying "1".