Escape special chars on Instant Results and Autosuggest

assets/js/instant-results/components/results/result.js

@@ -8,6 +8,7 @@ import { WPElement } from '@wordpress/element';
  */
 import { postTypeLabels } from '../../config';
 import { formatDate } from '../../utilities';
+import { escapeRegExp } from '../../../utils/helpers';
 import Result from '../common/result';
 
 /**
@@ -36,7 +37,7 @@ export default ({ hit, searchTerm, highlightTag }) => {
 	/**
 	 * Note: highlighting is redone here because the unified highlight type is not supported in ES5
 	 */
-	const regex = new RegExp(`\\b(${searchTerm})`, 'gi');
+	const regex = new RegExp(`\\b(${escapeRegExp(searchTerm)})`, 'gi');
 	let title;
 
 	if (highlightTag === '' || highlightTag === undefined) {

assets/js/utils/helpers.js

@@ -47,7 +47,10 @@ export const escapeRegExp = (string) => string.replace(/[.*+?^${}()|[\]\\]/g, '\
  * @returns {string} replaced string
  */
 export const replaceGlobally = (string, term, replacement) => {
-	return string.replace(new RegExp(escapeRegExp(term), 'g'), replacement);
+	return string.replace(
+		new RegExp(escapeRegExp(term), 'g'),
+		JSON.stringify(replacement).slice(1, -1), // Escapes especial chars and remove quotes added by JSON.stringify
+	);
 };
 
 /**