It will fix xss vulnerabilities.

https://code.google.com/p/reviewboard/issues/detail?id=3274
If input script in First name or Last name, It is executed when you use autocomplete in search box.