Fixed js injection in product search form.