Test for malformed search strings

[david4096]

Endpoints that accept strings should behave normally even when strings have been crafted that might escape a string, or show a regex pattern.