Description of what I changed

@isears
Fixed DWREncounterService.java to encode the search result phrase that appears when users search for an encounter to add in the Edit Visit page.

Note: Since ui was not defined in this file, I modeled this fix after this PR.

Link to Ticket

https://issues.openmrs.org/browse/RA-1865

Issue I worked on

This fix protects against reflected XSS that is executed when a user searches for an encounter to add on the Edit Visit page. Specifically, this vulnerability fixes the vulnerability that occurs when no search results match the search phrase. The search widget that appears presents a message which reads "No matches found for {search phrase}", which reflects XSS in the search phrase.

Before Fix

Injected iframe appears in search message:

After Fix

Search message is now shown as text rather than interpreted as HTML:

Steps to reproduce

1. Launch the OpenMRS application.
2. Login with username "Admin" and password "Admin123" with location as Inpatient Ward.
3. Select “System Administration”
4. Select “Advanced Administration”
5. Select “Manage Patients”
6. Type in “John” in the search box.
7. Select the “John D Patient” record.
8. Click on “View Patient Dashboard”.
9. Click on the “Start Visit” button.
10. Click on the “Add Encounter” button.
11. Enter <iframe src=https://www.ncsu.edu/> in the text box that appears

An iframe will appear in the search result.