Because if you enter my <u>potato</u> it gets styled, which shouldn't happen.

I suggest just doing the following:

diff --git a/discover/qml/ApplicationsListPage.qml b/discover/qml/ApplicationsListPage.qml
index 4445a195..e094b667 100644
--- a/discover/qml/ApplicationsListPage.qml
+++ b/discover/qml/ApplicationsListPage.qml
@@ -52,11 +52,8 @@ DiscoverPage {
 
     function escapeHtml(unsafe) {
         return unsafe
-            .replace(/&/g, "&")
             .replace(/</g, "&lt;")
-            .replace(/>/g, "&gt;")
-            .replace(/"/g, "&quot;")
-            .replace(/'/g, "&#039;");
+            .replace(/>/g, "&gt;");
     }
 
     background: Rectangle {

Why would the user enter my <u>potato</u>?

They shouldn't that doesn't mean we should style it when they do.

@apol ping. :)

So with this change, if you search "<b>potato</b>", you'll get as a title "potato". I wouldn't say that's entirely correct.

Why is that not entirely correct? The bold tags are just styling; the user clearly intended to search for the word "potato".

In D27079#607311, @ngraham wrote:

Why is that not entirely correct? The bold tags are just styling; the user clearly intended to search for the word "potato".

Because the user actually wrote "<b>potato</b>", it's only styling because you're thinking of html :)

But again, what user would actually write, by hand, "<b>potato</b>" in the search field? When users type into a search field, they don't add HTML styling. That only happens if they're copying and pasting from another source. In this case, if that do that and the tags come along for the ride, I'm claiming that the tags are unintentional and should be stripped to reflect the user's true intent--which is to search for the word "potato".

I feel like I'm missing something here.