diff --git a/apc.php b/apc.php
index 99ba65d9..dddb4544 100644
--- a/apc.php
+++ b/apc.php
@@ -87,7 +87,7 @@ function defaults($d,$v) {
     'SORT1' => '/^[AHSMCDTZ]$/',    // first sort key
     'SORT2' => '/^[DA]$/',          // second sort key
     'AGGR'  => '/^\d+$/',           // aggregation by dir level
-    'SEARCH'    => '~^[a-zA-Z0-9/_.-]*$~'           // aggregation by dir level
+    'SEARCH' => '/^.*$/'            // search regex
 );
 
 // cache scope
@@ -961,7 +961,7 @@ function block_sort($array1, $array2)
         '<option value=500',$MYREQUEST['COUNT']=='500'? ' selected':'','>Top 500</option>',
         '<option value=0  ',$MYREQUEST['COUNT']=='0'  ? ' selected':'','>All</option>',
         '</select>',
-    '&nbsp; Search: <input name=SEARCH value="',$MYREQUEST['SEARCH'],'" type=text size=25/>',
+    '&nbsp; Search: <input name=SEARCH value="',isset($MYREQUEST['SEARCH']) ? htmlspecialchars($MYREQUEST['SEARCH']) : '','" type=text size=25/>',
         '&nbsp;<input type=submit value="GO!">',
         '</form></div>';