[minor] README.md + encode query parameter in search

README.md

@@ -38,6 +38,14 @@ The ERPNext code is licensed as GNU General Public License (v3) and the Document
 
 ---
 
+## Contributing
+
+1. [Pull Request Requirements](https://github.com/frappe/erpnext/wiki/Pull-Request-Guidelines)
+1. [Translations](https://translate.erpnext.com)
+1. [Chart of Accounts](https://charts.erpnext.com)
+
+---
+
 ## Logo and Trademark
 
 The brand name ERPNext and the logo are trademarks of Frappe Technologies Pvt. Ltd.

erpnext/templates/includes/projects/project_search_box.html

@@ -1,19 +1,19 @@
 <div class="project-search text-muted pull-right">
-	<input type="text" id="project-search" placeholder="Quick Search">	
-	<i class="octicon octicon-search"></i> 	
+	<input type="text" id="project-search" placeholder="Quick Search">
+	<i class="octicon octicon-search"></i>
 </div>
 <div class="clearfix pull-right" style="width:300px;">
-	<h4 class="project-search-results pull-left"></h4> 
-	<p class="pull-right"> 
-		<a style="display: none; padding-left:5px;" href="/projects?project={{doc.name}}" class="octicon octicon-x 			text-extra-muted clear" title="Clear Search" ></a> 
-	</p> 
+	<h4 class="project-search-results pull-left"></h4>
+	<p class="pull-right">
+		<a style="display: none; padding-left:5px;" href="/projects?project={{doc.name}}" class="octicon octicon-x 			text-extra-muted clear" title="Clear Search" ></a>
+	</p>
 </div>
 
 <script>
 frappe.ready(function() {
 	if(get_url_arg("q")){
 	var txt = get_url_arg("q");
-	$(".project-search-results").html("Search results for : " + txt);
+	$(".project-search-results").html("Search results for : " + encodeURIComponent(txt));
 	$(".clear").toggle(true);
 	}
 	var thread = null;

erpnext/templates/pages/product_search.html

@@ -10,7 +10,7 @@
 <script>
 frappe.ready(function() {
 	var txt = get_url_arg("search");
-	$(".search-results").html("{{ _('Search results for') }}: " + txt);
+	$(".search-results").html("{{ _('Search results for') }}: " + encodeURIComponent(txt));
 	window.search = txt;
 	window.start = 0;
 	window.get_product_list();