diff --git a/config/brakeman.ignore b/config/brakeman.ignore
index fa6a9db90..2c640eb3b 100644
--- a/config/brakeman.ignore
+++ b/config/brakeman.ignore
@@ -1,5 +1,49 @@
 {
   "ignored_warnings": [
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "005569e6623f389266d3e1d760851a6ea9af52e21ba65b92d69dee5d3dfb492f",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/searches/_result.html.erb",
+      "line": 20,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "Current.new.card_description",
+      "render_path": [
+        {
+          "type": "controller",
+          "class": "SearchesController",
+          "method": "show",
+          "line": 7,
+          "file": "app/controllers/searches_controller.rb",
+          "rendered": {
+            "name": "searches/show",
+            "file": "app/views/searches/show.html.erb"
+          }
+        },
+        {
+          "type": "template",
+          "name": "searches/show",
+          "line": 25,
+          "file": "app/views/searches/show.html.erb",
+          "rendered": {
+            "name": "searches/_result",
+            "file": "app/views/searches/_result.html.erb"
+          }
+        }
+      ],
+      "location": {
+        "type": "template",
+        "template": "searches/_result"
+      },
+      "user_input": null,
+      "confidence": "High",
+      "cwe_id": [
+        79
+      ],
+      "note": ""
+    },
     {
       "warning_type": "SQL Injection",
       "warning_code": 0,
@@ -7,7 +51,7 @@
       "check_name": "SQL",
       "message": "Possible SQL injection",
       "file": "app/models/card/entropic.rb",
-      "line": 9,
+      "line": 7,
       "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
       "code": "left_outer_joins(:collection => :entropy_configuration).where(\"last_active_at <= DATETIME('now', '-' || COALESCE(entropy_configurations.#{period_name}, ?) || ' seconds')\", Entropy::Configuration.default.public_send(period_name))",
       "render_path": null,
@@ -30,7 +74,7 @@
       "check_name": "SQL",
       "message": "Possible SQL injection",
       "file": "app/models/concerns/searchable.rb",
-      "line": 22,
+      "line": 36,
       "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
       "code": "joins(\"join #{using} idx on #{table_name}.id = idx.rowid\")",
       "render_path": null,
@@ -46,6 +90,50 @@
       ],
       "note": ""
     },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "7184deb68ef62f7a71aea3f5536a055b2b42de2173a393e846aada1b1e548042",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/searches/_result.html.erb",
+      "line": 15,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "Current.new.card_title",
+      "render_path": [
+        {
+          "type": "controller",
+          "class": "SearchesController",
+          "method": "show",
+          "line": 7,
+          "file": "app/controllers/searches_controller.rb",
+          "rendered": {
+            "name": "searches/show",
+            "file": "app/views/searches/show.html.erb"
+          }
+        },
+        {
+          "type": "template",
+          "name": "searches/show",
+          "line": 25,
+          "file": "app/views/searches/show.html.erb",
+          "rendered": {
+            "name": "searches/_result",
+            "file": "app/views/searches/_result.html.erb"
+          }
+        }
+      ],
+      "location": {
+        "type": "template",
+        "template": "searches/_result"
+      },
+      "user_input": null,
+      "confidence": "High",
+      "cwe_id": [
+        79
+      ],
+      "note": ""
+    },
     {
       "warning_type": "Remote Code Execution",
       "warning_code": 24,
@@ -68,6 +156,50 @@
         470
       ],
       "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 2,
+      "fingerprint": "e94d5d8fe73652df999614040e2a83d64d6be944b19931ff171be0cac4b9078d",
+      "check_name": "CrossSiteScripting",
+      "message": "Unescaped model attribute",
+      "file": "app/views/searches/_result.html.erb",
+      "line": 27,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross_site_scripting",
+      "code": "Current.new.comment_body",
+      "render_path": [
+        {
+          "type": "controller",
+          "class": "SearchesController",
+          "method": "show",
+          "line": 7,
+          "file": "app/controllers/searches_controller.rb",
+          "rendered": {
+            "name": "searches/show",
+            "file": "app/views/searches/show.html.erb"
+          }
+        },
+        {
+          "type": "template",
+          "name": "searches/show",
+          "line": 25,
+          "file": "app/views/searches/show.html.erb",
+          "rendered": {
+            "name": "searches/_result",
+            "file": "app/views/searches/_result.html.erb"
+          }
+        }
+      ],
+      "location": {
+        "type": "template",
+        "template": "searches/_result"
+      },
+      "user_input": null,
+      "confidence": "High",
+      "cwe_id": [
+        79
+      ],
+      "note": ""
     }
   ],
   "brakeman_version": "7.0.2"