added validations to product, also javascript vulnerability patch, replaced $ with \z to end string thing.