Fix interpolation of query highlight

[stefanw]

Query highlight is already marked safe, but could contain braces that interfere with string interpolation. Interpolating it directly via format_html works, because the function respects safe strings.